last executing test programs: 5.362846164s ago: executing program 2 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11}, 0x0) 5.200133304s ago: executing program 4 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[@ANYBLOB="24000000071447fc000000000000000008000100000000000418020073797a3200000000"], 0x24}}, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="0203000304000000000000009d004000"/29], 0x20}, 0x1, 0x7}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x3c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) (async) recvmsg(0xffffffffffffffff, 0x0, 0x20) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="4100f60001000000000000000001"], 0x80}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000300)={r6, &(0x7f0000000000)=']&$\x00', 0x205140, &(0x7f0000000080)={@align=0x3857, {0x1, 0x9, 0x3, 0x1ff}}, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x83d0}) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r11, &(0x7f0000000340), 0x12) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x9, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x3}]}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @const={0x1}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x81, [{0x3, 0x0, 0xffffffff}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @datasec={0xa, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x7, 0x85}, {0x3, 0x9d1, 0x1}], "a7"}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}, @datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x5, 0x3}, {0x5, 0x3, 0x8}, {0x2, 0x3ff, 0x8d7}, {0x2, 0x5, 0x9}], "0f5f69"}, @var={0x3, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x61, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000680)=""/162, 0xf1, 0xa2, 0x0, 0x80000001, 0x10000}, 0x28) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x16, &(0x7f00000007c0)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0x52}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x3, 0x0, 0x0, 0xa, 0xa, 0xffffffffffffffe0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xa, 0x2, 0x9, 0x30, 0x1a}], &(0x7f0000000880)='syzkaller\x00', 0x4, 0x77, &(0x7f00000008c0)=""/119, 0x41100, 0x42, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x3, 0x0, 0x9}, {0x4, 0x1, 0x8, 0xb}, {0x5, 0x5, 0xc}, {0x0, 0x1, 0x5, 0x3}], 0x10, 0x100}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000b80)={r7, &(0x7f0000000bc0)='/dev/virtual_nci\x00', 0x202343, &(0x7f0000000ac0)={@align=0xffffffff, {0x81, 0x7, 0x1, 0x4}}, 0x4, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0xfff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0x2a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x1, 0x2, 0x5, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x7, 0x1, 0x8, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x43}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, @cgroup_device=0x6, r12, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r13, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x1, 0x1, 0x5, 0x1}, {0x4, 0x3, 0xd}, {0x5, 0x3, 0x9, 0x9}], 0x10, 0x7fff}, 0x94) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="410404", @ANYRESDEC], 0x7) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 5.057201928s ago: executing program 2 (id=573): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @local, 0x7, 0x2, 0xe, 0x500, 0x0, 0x40020440, r2}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc01}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@newpolicy={0xf4, 0x13, 0x800, 0x70bd28, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x4e23, 0x3ff, 0x4e23, 0x1, 0xa, 0x80, 0x20, 0x11, r2, r6}, {0x6, 0x4, 0x81, 0x5, 0x9, 0xd0c0, 0x60cd, 0x1}, {0x3, 0x2, 0x40, 0x800}, 0x8, 0x0, 0x2, 0x0, 0x3}, [@address_filter={0x28, 0x1a, {@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x2, 0x6, 0x9}}, @policy_type={0xa, 0x10, {0x1}}, @proto={0x5, 0x19, 0x3c}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x804) (async) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$rfkill(r7, &(0x7f0000000180)={0xbd, 0x9, 0x0, 0x1}, 0x8) 2.916403306s ago: executing program 2 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 2.816749892s ago: executing program 4 (id=576): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x2}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000200)={'hsr0\x00', 0x4}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000240), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x700, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0xf, 0x40, 0x7, 0x4, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0x6, 0x74, 0x3, 0x1e0000000}]}, 0x20}}, 0xc040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 2.205822961s ago: executing program 3 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616edea7499b0002801400010000000000", @ANYRES32=0x0, @ANYBLOB="4c4400000000000008001b0064076955"], 0x50}}, 0x0) 1.9388484s ago: executing program 1 (id=583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) close(r0) epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000100)={{0xf00ff3c028977db0, @loopback, 0x4e21, 0x4, 'lc\x00', 0x8, 0xffff, 0x43}, {@loopback, 0x4e22, 0x4, 0x3, 0x0, 0x800}}, 0x44) (async) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000100)={{0xf00ff3c028977db0, @loopback, 0x4e21, 0x4, 'lc\x00', 0x8, 0xffff, 0x43}, {@loopback, 0x4e22, 0x4, 0x3, 0x0, 0x800}}, 0x44) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) (async) sendmmsg$alg(r7, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.721093751s ago: executing program 0 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/23, &(0x7f0000000040)=0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048001}, 0x24000840) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES8, @ANYRESOCT=r5, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r5, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40008c5}, 0x22004091) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, 0x0, 0x4000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) getsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c5841, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000140)=0x1ff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300)=@ax25={{0x3, @rose}, [@rose, @remote, @null, @default, @netrom, @remote, @remote, @netrom]}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300)=@ax25={{0x3, @rose}, [@rose, @remote, @null, @default, @netrom, @remote, @remote, @netrom]}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.629697785s ago: executing program 3 (id=585): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x1, 0x1, 0xcc}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x4}}, @rc={0x1f, @any, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000240)='veth1_macvtap\x00', 0xfffffffffffffffc, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x801c581f, 0x30000002000005c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r11, 0x29, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r12, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) poll(&(0x7f0000000080)=[{r4, 0x8292}, {0xffffffffffffffff, 0x112}, {r5, 0x4404}, {r7, 0x602}], 0x4, 0xf) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.628241394s ago: executing program 4 (id=586): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400), 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x18, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@typed={0x4, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$kcm(0x29, 0x5, 0x0) (rerun: 32) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) (async) sendmmsg(r3, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@generic="c698c801"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r5, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x8946, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.593558769s ago: executing program 2 (id=587): bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x5}, {0x8100, 0x5, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x64, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x3, "f3"}, {0x5, 0x2}]}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x1f, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @rand_addr=0x64010101, @private=0xa010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}, "00186371ae9b1c03"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4b}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x81}, 0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24068044}, 0x0) 1.381308976s ago: executing program 1 (id=588): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007110ae0000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc1448ca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c354764997bd47abcab66966d683c392ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a576769b101037ca057e91f4b04aa5784cdb236c534"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x3}, 0x10}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x8000001}, 0x8) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8}, 0x94) 1.36911928s ago: executing program 0 (id=589): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="540104000101010200000000000000000a00000538000480340002800c0003400000000000000004050001007b154bad37576c68ded369ffff00000005000200090000000c0003400000000000000006050002000100000008001a40000000050800034000000000080008400000009c08000740000080010800074000000007e00001802c00018014000300fe88000000000000000000000000000114000400fc0100000000000000000000000000002c0001"], 0x154}, 0x1, 0x0, 0x0, 0x8005}, 0x800) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={r0}) connect$phonet_pipe(r2, &(0x7f0000000500)={0x23, 0x0, 0xfd, 0x7}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) r4 = getpid() r5 = syz_open_procfs$namespace(r4, &(0x7f0000000300)='ns/mnt\x00') socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000440)={r6, &(0x7f0000000340)='\x00', 0x1, &(0x7f0000000380)={@align=0x8001, {0xa, 0x400, 0x7f, 0x7}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x7}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfb, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r9, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000180)={@remote, 0x1, 0x0, 0x30, 0x0, [{@broadcast}, {@empty}, {@initdev}]}}) 1.215132415s ago: executing program 2 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000e4000071109b00000000009500"], 0x0, 0x5}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x7a56, 0xb2d, 0x7}) bind$phonet(r2, &(0x7f0000000080)={0x23, 0x8, 0x1, 0x6}, 0x10) (async) r3 = socket$inet(0x2, 0x2, 0x0) close(r0) (async) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f0800040001000000", 0x24) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.092360532s ago: executing program 1 (id=591): r0 = socket$inet(0x2, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e21, 0xe8, @private0, 0xa4}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000140)=0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000000), &(0x7f0000000300)=r2}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r9, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r10], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08004d018bad0861"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0x100, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7dcd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x52}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000008c0)={{r4, &(0x7f0000000500)='GPL\x00', 0x84000, &(0x7f0000000f40)={@_ha_fsid={[0xfb, 0x1]}, {0x7, 0x6, 0x80000001, 0x3}}, 0x2, &(0x7f0000000580), &(0x7f0000000540)=0x5}, 0x3, &(0x7f0000000840)=[{0x3, 0x6, &(0x7f0000000600)='%*\'\x00', &(0x7f0000000f80)="39b0137f189c990d10ea86651f90a599be74c30320196f9b04a02857ba2a02ce46b0acc4e20aba7ad404dbb1e557049188f9962472b6bc54362fb985bb438edafa7dcda548e0d02dc59df410081413880cf6d678d5bb438b97a9d5b572136fc6aa957a49f2ebadb8b9e1420c5d64fde5f50bbfb6fa205403824a1f73c269d463d20eb815", 0x84, 0x38}, {0x2, 0x1, &(0x7f00000006c0)='\b', &(0x7f0000000640)="521b696c6a8a5e6bd37f2dd9c04768688cbec46c700680cee85a65ce757595dce7485a2193e02afcf068832a59e92cda2c6038f9d8088c5bc70bf2a1d842cac1f8b14914aeba2e74e4c4eeb88902b6a63184fd8a98a1bcdea9567cf6f0f5995321d7b556c2097530259f73a8ceaf5af4737636a2", 0x74, 0x1a}, {0x1, 0x3fa, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="ee109cdb11cb85722104477eb165086cf73b68d9568087424cdf13a522f9fc60e6c1bc36a64b18a9c430a2997bde5199e0097cd268cfe081a21709cd0b42b470b76cf2ed84373aad08323ca8a4f4da25c5c4a3808cc3429fb4bb7b731e4a855cd64fce7758e9", 0x66, 0x18}]}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000000000400"/38], 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x1407, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r13, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r14, 0x4) (async) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r12) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r15, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000f00)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffffffffffff, "b7343c034d4a5f252a7f8f7810814c2055eb078c4d51f9841a2fe892c701ca8e", 0x8000, 0x8, 0x9, 0xd00}, 0x3c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e20, 0xddd3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}}, 0x4, 0xfff8}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x93, 0x4, 0x8206, 0x1, 0x8, 0x7b3, 0xfffffffa, 0x8, r16}, &(0x7f00000001c0)=0x20) 1.091195354s ago: executing program 3 (id=592): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.017180626s ago: executing program 0 (id=593): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7000002, 0x20010, 0xffffffffffffffff, 0xe74c5000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_GATEWAY={0x14, 0x5, @private1}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001980)={{0xffffffffffffffff, &(0x7f0000000140)='{\x00', 0xd4100, &(0x7f0000000180)={@align=0x8, {0x1, 0x7fff, 0x50, 0xe}}, 0x42, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}, 0x7, &(0x7f0000001880)=[{0x3, 0x6bd, &(0x7f0000000240)='#\'\x00', &(0x7f0000000280)="0b3154d7bec566cb361c1ff9347a498daaa74b9ae09105cd4d3324807126162d4854c37fbec65354b2ebf1ba5672264b8c2bd7b59e0cf21a9935619966e22ca777bff82666786cc990cf89972af109d6dffd5fc07d714957791513769927fdc2fab19c434c498e83576085259ae6b719daf827e9d1b62cbcbdda6b156a7de10bceb09c81a294ab50a280d2ca595e9ef086863951a6b7c166379013ecdfbef315aec96efd72eaf0cc68e0c4c90156f86c7a25b2fddc666abc92206aa372fdb2c47d89b397b22636af9b86dace262624276f0624fd688e988a24e7cf00a622193fd924c89f7ca84449bb4f788b2dde2672b9ad6f57c7ac14b3", 0xf8, 0x29}, {0x3, 0x3, &(0x7f0000000380)='^-\x00', &(0x7f00000003c0)="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", 0xfa}, {0x2, 0x7, &(0x7f00000004c0)='[[--^\x00', &(0x7f0000000500)="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", 0x1000, 0x8}, {0x1, 0xe88, &(0x7f0000001500)='NLBL_MGMT\x00', &(0x7f0000001540)="9b0300ffbe27a58df5797a33bfe1ea96ff34f2fc9e8faf8888455b684836b50a4b184e8e47f72f5fb0fc59ea42358c41a2a7f851e10819552bfc417375b7edabe5beeea0c74b2b8f85b5dff4072b2f468363a355d4e110f64cb802148a43fb9a6b678539d11d1c913cc7a9338514d9fb878a166581db55fe4015ea04d4010a539fc6b1bfdae0ccfb3668759e6a410799309308eac96baa8ab2d432a9d724b30ef826f3cefbf21442be85dfb2e10515d908093d23823ec5c0a786c99eeb994f73", 0xc0, 0x20}, {0x3, 0x0, &(0x7f0000001600)='}\xc0,&]\x0e]/]+^:\x00', &(0x7f0000001640)="4654e786a8eecc2a6b2e7335a5c3898f3c49c3d39dce74c205e24e27ade6a696276d63e26eb78dd0b787691fcabfd833b2522b417db572bb03b5f815c0927f0cb00e96a7c2908beb3fe72e6f7e0b96278f9b40a8c255e36b5e3d3b4c66bd4b55800aeafda5cfd5ab0be16c9c35101a81255ca705b9925081816cb8aea894686cd6f33929bda2d73d91e4ad77dfc85d07f034ca093961ad2fa34021be24b3246f6338dfad116d180d6bae52f965918703ca3fc129c94fa9a77c", 0xb9, 0x30}, {0x3, 0x7, &(0x7f0000001700)='\x00', &(0x7f0000001740)="6180dd375696e37905a6af83725fa2478e26821c71c38b674124339e1407fa4a03381df015d951bccdce5985d5cb33482df5c8962e0fe256834fc6118be6ee8ef14fa349d10d9959fc6c12255222682aa413c967e0cf15edb10730e6288c342ee0f3b81a1257387239cc59eb5420ca58bbc04169b8413536456374b5fef928f6838df67af00e5b0ff75e779fc7023a00869c552cc793a407623d3a0a8d62d94bfa851dbd87b96cab3fd4693b", 0xac, 0x10}, {0x3, 0xffffffff, &(0x7f0000001800)='NLBL_MGMT\x00', &(0x7f0000001840)="d34c246cf22e18df38dcff59e8e2b332ed763e7ff14f5915622ec285", 0x1c, 0x2}]}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x48, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 850.853494ms ago: executing program 3 (id=594): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r2) (async) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0xf5, r6, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) 729.680781ms ago: executing program 2 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r16], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 729.135965ms ago: executing program 1 (id=596): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x158, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x144, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 701.042638ms ago: executing program 0 (id=597): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x6, 0x7}]}}}}}}}, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f00000000c0)) ioctl(r1, 0x8b32, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r0, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) (async) socket$inet6(0xa, 0x3, 0x6) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) (async) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x6, 0x7}]}}}}}}}, 0x0) (async) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f00000000c0)) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) 651.879312ms ago: executing program 4 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300021700000000000000000000000200080008000000a30000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000040009000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000070019"], 0xb8}, 0x1, 0x7}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000feffefff8900000008000300", @ANYRES32=r10, @ANYBLOB="14001d800c000080060005005200000004000080"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xac, r9, 0x4863c3e1a801edde, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7dae}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x545}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0xb6, 0xfffffffa, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xae}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8020000, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xece8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f00000a2000)={0x2c, &(0x7f00000001c0)=[{0x716b, 0x0, 0x6, 0xc}, {0x9, 0xc, 0x8, 0x7f}, {0x9, 0x2, 0xf, 0xfffffff7}, {0x71e, 0x6, 0x0, 0x2}, {0x0, 0x0, 0x8}, {0x7, 0xf, 0x93, 0x8}, {0xc000, 0x6, 0x4, 0x200}, {0x6, 0x7, 0x3, 0x7}]}, 0x6b) 372.825412ms ago: executing program 0 (id=599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000081"], 0x0, 0x2a}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020025bd7000ffdbdf251100000008000100", @ANYRES32=r2, @ANYRES64=r6, @ANYRES32=r6, @ANYBLOB="08001600c0020000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc0) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x100, 0x1f8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xff000000, 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {0x7f}, 0x21, 0x4, 0x43}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x400, 0x7, [0x1f, 0x38, 0x3d, 0x22, 0x20, 0x2c, 0x24, 0x5, 0xa, 0x5, 0x39, 0x3c, 0x15, 0x6, 0x1d, 0x25], 0x0, 0x2, 0x7ff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0x6, [0x5, 0x3, 0x26, 0xd, 0x13, 0x3, 0x2c, 0x38, 0x36, 0x2f, 0xd, 0x2e, 0x1e, 0x3d, 0x3, 0x33], 0x1, 0x9, 0x9}}}, {{@ip={@remote, @private=0xa010101, 0xffffffff, 0xffff00, 'veth0_to_hsr\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x84, 0x2, 0x22}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x5, 0x4, 0x6, 0x6, 0x4]}, {0x2, [0x5, 0x6, 0x3, 0x0, 0x4, 0x5], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 366.502295ms ago: executing program 4 (id=600): bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100001002cbd70000000000000000000abc4620101c76eb90b83ecd446dae31aca2ddddc0c8aca353e177e213ed673aaf79d784cb97a93f82e0d5d11c522e0e83b316574610eab4c25fc018c49172a30efab745b8b10d856a8a9b374564d6b4678b351ddeb11da6ae033892e5605c1db1d97225f52f737ca8d732ee1c7dfd2b80fd0094aab5cbdec575b217b6724", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000440b00000600000088a800001400010001010000660700001a0b000088a80000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 365.995112ms ago: executing program 3 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r0}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x3ff, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x90, 0x0, 0x0, 0x0, 0x3}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r0}, 0x18) (async) syz_emit_ethernet(0x7e, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x3ff, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x90, 0x0, 0x0, 0x0, 0x3}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) (async) 360.654028ms ago: executing program 1 (id=602): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xffffff4c) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffff4c) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000100)="2f183b4351", 0x5) (async) write(r1, &(0x7f0000000100)="2f183b4351", 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) (async) r7 = socket$packet(0x11, 0x4000000000002, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "c5a83fc687c23b959ec60217a198614e784277abc4faa659fc55451b21f0222ccb246c8b27e0e1e735ec83f0193d2801c5f4f51241bbeeb5bb33552223166142921aa46f19debe310a2d786eeef26dd320b1f3ffe9def347f614568dc832029c40ecadcd85ce55c61c3db96fcf29720e9150fd7526006cfd253eeb087e2d9ca963b44421992b643661d9d419e76921db654c93da86ca877cfcd669ce3bedffdd2a3b522830621e34323e76c411d808d4ed620bd870ed4deaffdb20ba2c74dc61370ed6edd38864a1e3e491681ef08af5861b6beee9edb759fa9f267fb61c503ebb0fcb0977b8ded9f69f7d0d5257489d4c61057024af2bbb33f4a793b5cd8d73", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000014c0)={r8, 0x6ae}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000014c0)={r8, 0x6ae}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getchain={0x2c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {0x3, 0xffe0}, {0x2, 0x10}}, [{0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x6, 0x0) 117.02149ms ago: executing program 3 (id=603): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x3, 0x8, {{0x1a, 0x4, 0x1, 0x3d, 0x68, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0x3, [{@private=0xa010100, 0x6}]}, @rr={0x7, 0x17, 0xed, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, @local, @rand_addr=0x64010100]}, @cipso={0x86, 0x2e, 0x3, [{0x7, 0x10, "04bdcf958dac11bf0352cc5fd55d"}, {0x1, 0x7, "30a0af3a3c"}, {0x2, 0x11, "db2f2a3e4777c7952059f7c2322294"}]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xa6b1, 0x0, r0, 0xff, '\x00', r1, r2, 0x2, 0x5, 0x4}, 0x50) 37.314149ms ago: executing program 0 (id=604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @private=0xa010102}, 0x4, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)='batadv0\x00', 0x7, 0xcf, 0xaaed}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x4, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 5.733013ms ago: executing program 1 (id=605): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) 0s ago: executing program 4 (id=606): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 82.356003][ T5613] cgroup: Unknown subsys name 'net' [ 82.463182][ T5613] cgroup: Unknown subsys name 'cpuset' [ 82.472363][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.164784][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.486697][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.497047][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.507213][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.517510][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.525380][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.539574][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.548289][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.555572][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.567162][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.577274][ T4942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.608796][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.618275][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.627560][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.635640][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.645364][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.655337][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.667038][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.675619][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.684459][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.694333][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.697222][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.710513][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.724084][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.742920][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.750767][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.620673][ T5626] Bluetooth: hci1: command tx timeout [ 88.626913][ T5640] Bluetooth: hci0: command tx timeout [ 88.779635][ T5640] Bluetooth: hci4: command tx timeout [ 88.785847][ T5626] Bluetooth: hci2: command tx timeout [ 88.786882][ T5629] Bluetooth: hci3: command tx timeout [ 88.915353][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.922675][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.931201][ T5625] bridge_slave_0: entered allmulticast mode [ 88.939705][ T5625] bridge_slave_0: entered promiscuous mode [ 88.971087][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.978523][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.986280][ T5632] bridge_slave_0: entered allmulticast mode [ 88.994601][ T5632] bridge_slave_0: entered promiscuous mode [ 89.016288][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.023703][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.031098][ T5625] bridge_slave_1: entered allmulticast mode [ 89.038508][ T5625] bridge_slave_1: entered promiscuous mode [ 89.063791][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.071086][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.078313][ T5632] bridge_slave_1: entered allmulticast mode [ 89.085924][ T5632] bridge_slave_1: entered promiscuous mode [ 89.127837][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.135040][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.142318][ T5631] bridge_slave_0: entered allmulticast mode [ 89.149735][ T5631] bridge_slave_0: entered promiscuous mode [ 89.202417][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.210194][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.217517][ T5631] bridge_slave_1: entered allmulticast mode [ 89.226440][ T5631] bridge_slave_1: entered promiscuous mode [ 89.248379][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.262099][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.284244][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.327577][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.334900][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.342581][ T5624] bridge_slave_0: entered allmulticast mode [ 89.350447][ T5624] bridge_slave_0: entered promiscuous mode [ 89.360710][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.384100][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.412334][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.419810][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.427014][ T5624] bridge_slave_1: entered allmulticast mode [ 89.434994][ T5624] bridge_slave_1: entered promiscuous mode [ 89.452192][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.459411][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.466605][ T5635] bridge_slave_0: entered allmulticast mode [ 89.474315][ T5635] bridge_slave_0: entered promiscuous mode [ 89.484334][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.495475][ T5632] team0: Port device team_slave_0 added [ 89.523387][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.530963][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.538189][ T5635] bridge_slave_1: entered allmulticast mode [ 89.545807][ T5635] bridge_slave_1: entered promiscuous mode [ 89.568100][ T5632] team0: Port device team_slave_1 added [ 89.587303][ T5625] team0: Port device team_slave_0 added [ 89.629380][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.641080][ T5625] team0: Port device team_slave_1 added [ 89.659933][ T5631] team0: Port device team_slave_0 added [ 89.679377][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.704238][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.716027][ T5631] team0: Port device team_slave_1 added [ 89.722690][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.729849][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.755993][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.792612][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.815264][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.822441][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.848997][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.871783][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.878921][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.905256][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.949699][ T5624] team0: Port device team_slave_0 added [ 89.956068][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.963276][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.989437][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.012992][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.020399][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.046673][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.059953][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.066951][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.093432][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.107372][ T5624] team0: Port device team_slave_1 added [ 90.121749][ T5635] team0: Port device team_slave_0 added [ 90.161224][ T5635] team0: Port device team_slave_1 added [ 90.191203][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.198221][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.224589][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.280252][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.287326][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.314072][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.336850][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.344168][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.371649][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.389533][ T5632] hsr_slave_0: entered promiscuous mode [ 90.396713][ T5632] hsr_slave_1: entered promiscuous mode [ 90.428909][ T5631] hsr_slave_0: entered promiscuous mode [ 90.435499][ T5631] hsr_slave_1: entered promiscuous mode [ 90.442059][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.447870][ T5631] Cannot create hsr debugfs directory [ 90.454331][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.461388][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.487627][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.512300][ T5625] hsr_slave_0: entered promiscuous mode [ 90.519206][ T5625] hsr_slave_1: entered promiscuous mode [ 90.525444][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 90.531267][ T5625] Cannot create hsr debugfs directory [ 90.670251][ T5624] hsr_slave_0: entered promiscuous mode [ 90.676776][ T5624] hsr_slave_1: entered promiscuous mode [ 90.683197][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 90.689024][ T5624] Cannot create hsr debugfs directory [ 90.708967][ T5629] Bluetooth: hci0: command tx timeout [ 90.708985][ T5640] Bluetooth: hci1: command tx timeout [ 90.722678][ T5635] hsr_slave_0: entered promiscuous mode [ 90.729537][ T5635] hsr_slave_1: entered promiscuous mode [ 90.735716][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 90.741536][ T5635] Cannot create hsr debugfs directory [ 90.859542][ T5640] Bluetooth: hci4: command tx timeout [ 90.862857][ T5629] Bluetooth: hci2: command tx timeout [ 90.865577][ T5626] Bluetooth: hci3: command tx timeout [ 91.324505][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.346086][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.355212][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.366857][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.376885][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.389323][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.397922][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.410481][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.487044][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.505866][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.514369][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.524854][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.533456][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.545135][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.569382][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.581411][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.663503][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.675537][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.685358][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.698208][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.715964][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.727036][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.750108][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.761249][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.846220][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.858346][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.879502][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.890854][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.900119][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.910611][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.918483][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.931299][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.983013][ T29] cfg80211: failed to load regulatory.db [ 92.023853][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.076994][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.087610][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.096029][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.106101][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.116074][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.127173][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.135694][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.146401][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.216177][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.250269][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.257827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.280580][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.287751][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.311490][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.382519][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.418292][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.425471][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.451227][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.464580][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.471836][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.535076][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.551779][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.593568][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.600809][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.645160][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.652346][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.688352][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.754203][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.780549][ T5640] Bluetooth: hci0: command tx timeout [ 92.786760][ T5626] Bluetooth: hci1: command tx timeout [ 92.800039][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.807312][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.847771][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.855079][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.940731][ T5640] Bluetooth: hci3: command tx timeout [ 92.945869][ T5629] Bluetooth: hci4: command tx timeout [ 92.947523][ T5626] Bluetooth: hci2: command tx timeout [ 92.969775][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.024514][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.031774][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.080899][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.088116][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.660278][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.851419][ T5625] veth0_vlan: entered promiscuous mode [ 93.893921][ T5625] veth1_vlan: entered promiscuous mode [ 93.963002][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.073129][ T5625] veth0_macvtap: entered promiscuous mode [ 94.116139][ T5625] veth1_macvtap: entered promiscuous mode [ 94.212334][ T5632] veth0_vlan: entered promiscuous mode [ 94.237660][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.279175][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.331985][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.348523][ T5632] veth1_vlan: entered promiscuous mode [ 94.356759][ T168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368432][ T168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.382323][ T168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.398925][ T168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524706][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.547525][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.623753][ T5632] veth0_macvtap: entered promiscuous mode [ 94.644242][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.672397][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.690538][ T5632] veth1_macvtap: entered promiscuous mode [ 94.777606][ T5631] veth0_vlan: entered promiscuous mode [ 94.781773][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.792629][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.821998][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.849398][ T5631] veth1_vlan: entered promiscuous mode [ 94.861487][ T5626] Bluetooth: hci1: command tx timeout [ 94.866966][ T5640] Bluetooth: hci0: command tx timeout [ 94.883770][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.957969][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.988291][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.998158][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.012096][ T5635] veth0_vlan: entered promiscuous mode [ 95.021064][ T5640] Bluetooth: hci2: command tx timeout [ 95.021076][ T5629] Bluetooth: hci3: command tx timeout [ 95.029495][ T5626] Bluetooth: hci4: command tx timeout [ 95.046153][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.055402][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.121872][ T5635] veth1_vlan: entered promiscuous mode [ 95.136092][ T5631] veth0_macvtap: entered promiscuous mode [ 95.183970][ T5631] veth1_macvtap: entered promiscuous mode [ 95.271502][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.284798][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.322231][ T5624] veth0_vlan: entered promiscuous mode [ 95.352148][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.401023][ T5624] veth1_vlan: entered promiscuous mode [ 95.412520][ T5635] veth0_macvtap: entered promiscuous mode [ 95.431348][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.440575][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.453556][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.468305][ T5635] veth1_macvtap: entered promiscuous mode [ 95.490796][ T5822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.534207][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.544168][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.574393][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.585526][ T1017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.632779][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.712292][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.721813][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.792802][ T5624] veth0_macvtap: entered promiscuous mode [ 95.801772][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.831687][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.877005][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.890351][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.904705][ T5624] veth1_macvtap: entered promiscuous mode [ 95.906824][ T5833] Zero length message leads to an empty skb [ 96.089326][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.124528][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.155614][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.186055][ T5839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.211768][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.265003][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.297508][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.326460][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.337233][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.362602][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.371752][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.410417][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.430630][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.530262][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.558855][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.725946][ T5854] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 96.755475][ T5854] netlink: 'syz.1.13': attribute type 11 has an invalid length. [ 96.764063][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.796507][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.804430][ T5854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13'. [ 96.861498][ T5854] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.944710][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.962465][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.222057][ T5857] nbd0: detected capacity change from 0 to 63 [ 97.243567][ T5640] block nbd0: Receive control failed (result -104) [ 97.243918][ T5626] block nbd0: Receive control failed (result -32) [ 97.275174][ T5860] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 97.325367][ T5866] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 97.557374][ T5876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 97.594786][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 97.751880][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.792273][ T5881] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 97.816644][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.853874][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.883316][ T5885] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 97.912226][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.938248][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 97.959358][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 98.028805][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032481400: rx timeout, send abort [ 98.039492][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888032481400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 98.054755][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055a1d400: rx timeout, send abort [ 98.064184][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888055a1d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.305565][ T5900] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 98.657653][ T5915] batadv_slave_0: entered promiscuous mode [ 98.745364][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.845217][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.163554][ T5935] FAULT_INJECTION: forcing a failure. [ 99.163554][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.194874][ T5939] x_tables: duplicate underflow at hook 2 [ 99.218147][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 99.218177][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.218196][ T5935] Call Trace: [ 99.218204][ T5935] [ 99.218211][ T5935] dump_stack_lvl+0xe8/0x150 [ 99.218258][ T5935] should_fail_ex+0x40c/0x560 [ 99.218284][ T5935] _copy_from_user+0x2d/0xb0 [ 99.218325][ T5935] __sys_sendto+0x2a9/0x5a0 [ 99.218353][ T5935] ? ksys_write+0x1e6/0x270 [ 99.218388][ T5935] ? __pfx___sys_sendto+0x10/0x10 [ 99.218414][ T5935] ? __mutex_unlock_slowpath+0x731/0x900 [ 99.218472][ T5935] ? __pfx_ksys_write+0x10/0x10 [ 99.218510][ T5935] __x64_sys_sendto+0xde/0x100 [ 99.218539][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.218563][ T5935] do_syscall_64+0x174/0x580 [ 99.218590][ T5935] ? trace_irq_disable+0x3b/0x140 [ 99.218616][ T5935] ? clear_bhb_loop+0x40/0x90 [ 99.218642][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.218662][ T5935] RIP: 0033:0x7f64f079de59 [ 99.218689][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.218706][ T5935] RSP: 002b:00007f64f15a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.218728][ T5935] RAX: ffffffffffffffda RBX: 00007f64f0a25fa0 RCX: 00007f64f079de59 [ 99.218743][ T5935] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000004 [ 99.218756][ T5935] RBP: 00007f64f15a6090 R08: 0000200000000200 R09: 0000000000000014 [ 99.218770][ T5935] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001 [ 99.218782][ T5935] R13: 00007f64f0a26038 R14: 00007f64f0a25fa0 R15: 00007ffc8ef47c58 [ 99.218815][ T5935] [ 99.625787][ T5951] openvswitch: netlink: IPv4 tunnel dst address is zero [ 99.789564][ T5961] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 99.800623][ T5952] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 100.127025][ T5972] netlink: 'syz.2.46': attribute type 12 has an invalid length. [ 100.135565][ T5972] netlink: 'syz.2.46': attribute type 11 has an invalid length. [ 100.506350][ T5981] netlink: 'syz.2.49': attribute type 21 has an invalid length. [ 100.528873][ T5981] netlink: 'syz.2.49': attribute type 5 has an invalid length. [ 100.796540][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.827955][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.861897][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.895369][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.970808][ T5992] FAULT_INJECTION: forcing a failure. [ 100.970808][ T5992] name failslab, interval 1, probability 0, space 0, times 1 [ 101.005516][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 101.005546][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.005559][ T5992] Call Trace: [ 101.005567][ T5992] [ 101.005576][ T5992] dump_stack_lvl+0xe8/0x150 [ 101.005614][ T5992] should_fail_ex+0x40c/0x560 [ 101.005644][ T5992] should_failslab+0xa8/0x100 [ 101.005685][ T5992] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 101.005712][ T5992] ? local_lock_release+0x9c/0x160 [ 101.005742][ T5992] ? __alloc_skb+0x1d7/0x7a0 [ 101.005767][ T5992] ? __alloc_skb+0x1d7/0x7a0 [ 101.005803][ T5992] __alloc_skb+0x1d7/0x7a0 [ 101.005837][ T5992] alloc_skb_with_frags+0xc6/0x760 [ 101.005868][ T5992] ? __lock_acquire+0x683/0x2cf0 [ 101.005907][ T5992] sock_alloc_send_pskb+0x878/0x990 [ 101.005948][ T5992] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 101.005986][ T5992] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 101.006025][ T5992] ? dev_get_by_index+0x22/0x2d0 [ 101.006048][ T5992] ? dev_get_by_index+0x22/0x2d0 [ 101.006077][ T5992] packet_sendmsg+0x3258/0x5040 [ 101.006098][ T5992] ? aa_file_perm+0x18b/0x15f0 [ 101.006121][ T5992] ? aa_label_sk_perm+0x532/0x6e0 [ 101.006170][ T5992] ? __lock_acquire+0x683/0x2cf0 [ 101.006211][ T5992] ? __lock_acquire+0x683/0x2cf0 [ 101.006257][ T5992] ? __pfx_packet_sendmsg+0x10/0x10 [ 101.006289][ T5992] ? __might_fault+0xaf/0x130 [ 101.006313][ T5992] ? __pfx_aa_sk_perm+0x10/0x10 [ 101.006349][ T5992] ? aa_sock_msg_perm+0xf1/0x1b0 [ 101.006376][ T5992] ? __pfx_packet_sendmsg+0x10/0x10 [ 101.006395][ T5992] sock_sendmsg_nosec+0x13a/0x180 [ 101.006423][ T5992] __sys_sendto+0x408/0x5a0 [ 101.006452][ T5992] ? ksys_write+0x1e6/0x270 [ 101.006493][ T5992] ? __pfx___sys_sendto+0x10/0x10 [ 101.006519][ T5992] ? __mutex_unlock_slowpath+0x731/0x900 [ 101.006580][ T5992] ? __pfx_ksys_write+0x10/0x10 [ 101.006619][ T5992] __x64_sys_sendto+0xde/0x100 [ 101.006649][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.006680][ T5992] do_syscall_64+0x174/0x580 [ 101.006708][ T5992] ? trace_irq_disable+0x3b/0x140 [ 101.006735][ T5992] ? clear_bhb_loop+0x40/0x90 [ 101.006762][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.006785][ T5992] RIP: 0033:0x7f7d6e19de59 [ 101.006805][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.006823][ T5992] RSP: 002b:00007f7d6efe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 101.006846][ T5992] RAX: ffffffffffffffda RBX: 00007f7d6e425fa0 RCX: 00007f7d6e19de59 [ 101.006862][ T5992] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000004 [ 101.006876][ T5992] RBP: 00007f7d6efe8090 R08: 0000200000000200 R09: 0000000000000014 [ 101.006890][ T5992] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001 [ 101.006903][ T5992] R13: 00007f7d6e426038 R14: 00007f7d6e425fa0 R15: 00007ffece656568 [ 101.006941][ T5992] [ 101.792042][ T6001] validate_nla: 3 callbacks suppressed [ 101.792075][ T6001] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 101.813224][ T6008] netlink: 'syz.1.60': attribute type 21 has an invalid length. [ 101.840601][ T6008] __nla_validate_parse: 6 callbacks suppressed [ 101.840620][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 101.999051][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 102.037116][ T6001] netlink: 'syz.2.58': attribute type 6 has an invalid length. [ 102.064119][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 102.079777][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 102.093658][ T6001] netlink: 'syz.2.58': attribute type 6 has an invalid length. [ 102.102460][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 102.374711][ T5626] block nbd1: Receive control failed (result -32) [ 104.093568][ T6134] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 104.141867][ T6136] tipc: Enabling of bearer rejected, failed to enable media [ 104.760310][ T6171] xt_cluster: node mask cannot exceed total number of nodes [ 104.873746][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 104.974378][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 105.305098][ T6195] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 105.325048][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 105.537999][ T6205] syzkaller1: entered promiscuous mode [ 105.555579][ T6205] syzkaller1: entered allmulticast mode [ 105.585865][ T6209] netlink: 68 bytes leftover after parsing attributes in process `syz.4.113'. [ 105.928828][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 105.974952][ T6223] netlink: 'syz.2.117': attribute type 28 has an invalid length. [ 106.038282][ T6223] netlink: 'syz.2.117': attribute type 3 has an invalid length. [ 106.137277][ T6235] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 106.429347][ T6249] netlink: 'syz.2.126': attribute type 2 has an invalid length. [ 106.906472][ T6270] __nla_validate_parse: 10 callbacks suppressed [ 106.906490][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 106.997611][ T6270] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 107.044216][ T24] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 107.189189][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 107.388253][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 107.476351][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.485636][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.675784][ T6311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.143'. [ 107.697480][ T6311] netlink: 76 bytes leftover after parsing attributes in process `syz.2.143'. [ 107.708547][ T6311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.143'. [ 107.722845][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 107.733330][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 108.049537][ T6323] syzkaller0: entered promiscuous mode [ 108.055121][ T6323] syzkaller0: entered allmulticast mode [ 108.078354][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 108.090982][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'. [ 109.115845][ T6352] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 109.132667][ T6352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.215907][ T6289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.499012][ T6365] netlink: 'syz.2.155': attribute type 64 has an invalid length. [ 110.512037][ T6367] Bluetooth: MGMT ver 1.23 [ 110.910634][ T6379] geneve2: entered promiscuous mode [ 111.011765][ T6395] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 111.020950][ T6395] netlink: 'syz.1.163': attribute type 3 has an invalid length. [ 111.028848][ T6395] netlink: 'syz.1.163': attribute type 7 has an invalid length. [ 111.046916][ T6395] netlink: 'syz.1.163': attribute type 8 has an invalid length. [ 111.068769][ T6395] NCSI netlink: No device for ifindex 131092 [ 111.502887][ T6398] syzkaller0: entered promiscuous mode [ 111.557765][ T6398] syzkaller0: entered allmulticast mode [ 112.034690][ T6424] team0 (unregistering): Port device team_slave_0 removed [ 112.051373][ T6424] team0 (unregistering): Port device team_slave_1 removed [ 112.068105][ T5287] veth1_vlan: left promiscuous mode [ 112.525963][ T6450] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 112.823052][ T6469] __nla_validate_parse: 15 callbacks suppressed [ 112.823091][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 114.136035][ T6476] macvlan0: entered promiscuous mode [ 114.511091][ T6494] tc action pedit 'at' offset 3 out of bounds [ 115.091979][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.482145][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.191'. [ 115.736319][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 115.836001][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'. [ 116.109386][ T6561] syzkaller0: entered promiscuous mode [ 116.130478][ T6561] syzkaller0: entered allmulticast mode [ 116.207082][ T6565] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.198'. [ 116.267366][ T6566] netlink: 'syz.4.198': attribute type 12 has an invalid length. [ 116.324787][ T6565] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 116.403883][ T6565] 0ªX¹¦Dö»: entered allmulticast mode [ 116.530109][ T6575] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 116.697805][ T6578] vxcan1: entered promiscuous mode [ 116.721147][ T6578] vxcan1: entered allmulticast mode [ 116.819455][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 117.016921][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 117.122658][ T6594] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 117.212697][ T6594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.231294][ T6595] vlan2: entered promiscuous mode [ 117.236403][ T6595] bond1: entered promiscuous mode [ 117.243398][ T6595] vlan2: entered allmulticast mode [ 117.250964][ T6595] bond1: entered allmulticast mode [ 117.275692][ T6594] bond1: (slave bridge1): making interface the new active one [ 117.283489][ T6594] bridge1: entered promiscuous mode [ 117.289038][ T6594] bridge1: entered allmulticast mode [ 117.297787][ T6594] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 117.325856][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 117.346317][ T6598] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 117.354357][ T6049] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 117.367439][ T6598] netlink: 180 bytes leftover after parsing attributes in process `syz.1.209'. [ 117.844250][ T6614] netlink: 'syz.1.214': attribute type 9 has an invalid length. [ 117.935134][ T6618] syzkaller0: entered promiscuous mode [ 117.942274][ T6618] syzkaller0: entered allmulticast mode [ 118.058127][ T6624] xt_l2tp: wrong L2TP version: 0 [ 118.241257][ T6627] netlink: 'syz.3.218': attribute type 8 has an invalid length. [ 118.292306][ T6629] pim6reg1: entered promiscuous mode [ 118.335761][ T6629] pim6reg1: entered allmulticast mode [ 118.354126][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 118.593717][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.474669][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 121.288134][ T6634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.570079][ T6700] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 121.807823][ T6707] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 121.841496][ T6707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.238'. [ 121.852585][ T6712] netlink: 'syz.4.240': attribute type 30 has an invalid length. [ 122.035071][ T6712] bond1: option arp_missed_max: invalid value (0) [ 122.058524][ T6712] bond1: option arp_missed_max: allowed values 1 - 255 [ 122.104818][ T6712] bond1 (unregistering): Released all slaves [ 122.460076][ T6734] netlink: 228 bytes leftover after parsing attributes in process `syz.3.245'. [ 122.588742][ T6737] C: renamed from lo (while UP) [ 122.623910][ T6737] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 123.803120][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.840771][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.871180][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.940553][ T1175] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.962125][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.027992][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.053174][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.067692][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.180360][ T6796] nbd2: detected capacity change from 0 to 63 [ 124.203983][ T6807] FAULT_INJECTION: forcing a failure. [ 124.203983][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.220338][ T5626] block nbd2: Receive control failed (result -104) [ 124.224417][ T5640] block nbd2: Receive control failed (result -32) [ 124.247960][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 124.258766][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.4.265 Not tainted syzkaller #0 PREEMPT(full) [ 124.258795][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.258807][ T6807] Call Trace: [ 124.258815][ T6807] [ 124.258823][ T6807] dump_stack_lvl+0xe8/0x150 [ 124.258874][ T6807] should_fail_ex+0x40c/0x560 [ 124.258904][ T6807] _copy_from_iter+0x1d3/0x1660 [ 124.258931][ T6807] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 124.258959][ T6807] ? rcu_is_watching+0x15/0xb0 [ 124.258992][ T6807] ? trace_kmem_cache_alloc+0x29/0xe0 [ 124.259019][ T6807] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 124.259046][ T6807] ? __pfx__copy_from_iter+0x10/0x10 [ 124.259072][ T6807] ? __alloc_skb+0x276/0x7a0 [ 124.259099][ T6807] ? __alloc_skb+0x276/0x7a0 [ 124.259133][ T6807] ? netlink_sendmsg+0x650/0xb40 [ 124.259173][ T6807] ? skb_put+0x112/0x210 [ 124.259205][ T6807] netlink_sendmsg+0x6c0/0xb40 [ 124.259249][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.259287][ T6807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 124.259315][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.259347][ T6807] sock_sendmsg_nosec+0x13a/0x180 [ 124.259375][ T6807] ____sys_sendmsg+0x54e/0x850 [ 124.259414][ T6807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.259456][ T6807] ? import_iovec+0x73/0xa0 [ 124.259490][ T6807] ___sys_sendmsg+0x2a5/0x360 [ 124.259520][ T6807] ? __lock_acquire+0x683/0x2cf0 [ 124.259555][ T6807] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.259628][ T6807] ? __fget_files+0x2a/0x420 [ 124.259656][ T6807] ? __fget_files+0x3a2/0x420 [ 124.259695][ T6807] __x64_sys_sendmsg+0x1b1/0x290 [ 124.259730][ T6807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.259780][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.259803][ T6807] do_syscall_64+0x174/0x580 [ 124.259831][ T6807] ? trace_irq_disable+0x3b/0x140 [ 124.259858][ T6807] ? clear_bhb_loop+0x40/0x90 [ 124.259884][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.259901][ T6807] RIP: 0033:0x7f2de399de59 [ 124.259924][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.259938][ T6807] RSP: 002b:00007f2de4831028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.259960][ T6807] RAX: ffffffffffffffda RBX: 00007f2de3c26090 RCX: 00007f2de399de59 [ 124.259972][ T6807] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 124.259983][ T6807] RBP: 00007f2de4831090 R08: 0000000000000000 R09: 0000000000000000 [ 124.259993][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.260003][ T6807] R13: 00007f2de3c26128 R14: 00007f2de3c26090 R15: 00007ffd920a34f8 [ 124.260030][ T6807] [ 124.528199][ T6793] netlink: 252 bytes leftover after parsing attributes in process `syz.3.264'. [ 124.842381][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 124.860780][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 124.882512][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.269'. [ 125.052132][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 125.185114][ T6830] gtp0: entered promiscuous mode [ 125.204095][ T6830] gtp0: entered allmulticast mode [ 125.578240][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.273'. [ 125.768119][ T1175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.805871][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.816759][ T1175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.892511][ T6861] FAULT_INJECTION: forcing a failure. [ 125.892511][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 125.947894][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT(full) [ 125.947926][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.947939][ T6861] Call Trace: [ 125.947948][ T6861] [ 125.947958][ T6861] dump_stack_lvl+0xe8/0x150 [ 125.948000][ T6861] should_fail_ex+0x40c/0x560 [ 125.948032][ T6861] should_failslab+0xa8/0x100 [ 125.948082][ T6861] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 125.948111][ T6861] ? skb_clone+0x212/0x3a0 [ 125.948146][ T6861] ? skb_clone+0x212/0x3a0 [ 125.948189][ T6861] skb_clone+0x212/0x3a0 [ 125.948229][ T6861] __netlink_deliver_tap+0x413/0x860 [ 125.948280][ T6861] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.948322][ T6861] netlink_deliver_tap+0x19c/0x1b0 [ 125.948360][ T6861] netlink_unicast+0x77f/0x940 [ 125.948406][ T6861] netlink_sendmsg+0x813/0xb40 [ 125.948454][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.948496][ T6861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.948536][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.948573][ T6861] sock_sendmsg_nosec+0x13a/0x180 [ 125.948602][ T6861] ____sys_sendmsg+0x54e/0x850 [ 125.948645][ T6861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.948692][ T6861] ? import_iovec+0x73/0xa0 [ 125.948731][ T6861] ___sys_sendmsg+0x2a5/0x360 [ 125.948765][ T6861] ? __lock_acquire+0x683/0x2cf0 [ 125.948804][ T6861] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.948882][ T6861] ? __fget_files+0x2a/0x420 [ 125.948911][ T6861] ? __fget_files+0x3a2/0x420 [ 125.948954][ T6861] __x64_sys_sendmsg+0x1b1/0x290 [ 125.948992][ T6861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.949049][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.949077][ T6861] do_syscall_64+0x174/0x580 [ 125.949109][ T6861] ? trace_irq_disable+0x3b/0x140 [ 125.949140][ T6861] ? clear_bhb_loop+0x40/0x90 [ 125.949169][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.949193][ T6861] RIP: 0033:0x7f2de399de59 [ 125.949216][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.949236][ T6861] RSP: 002b:00007f2de4852028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.949261][ T6861] RAX: ffffffffffffffda RBX: 00007f2de3c25fa0 RCX: 00007f2de399de59 [ 125.949278][ T6861] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 125.949293][ T6861] RBP: 00007f2de4852090 R08: 0000000000000000 R09: 0000000000000000 [ 125.949307][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.949320][ T6861] R13: 00007f2de3c26038 R14: 00007f2de3c25fa0 R15: 00007ffd920a34f8 [ 125.949358][ T6861] [ 126.473662][ T6876] syz.2.281: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.502661][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 126.502692][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.502705][ T6876] Call Trace: [ 126.502714][ T6876] [ 126.502724][ T6876] dump_stack_lvl+0xe8/0x150 [ 126.502763][ T6876] warn_alloc+0x24c/0x270 [ 126.502794][ T6876] ? stack_depot_save_flags+0x3ec/0x800 [ 126.502825][ T6876] ? __pfx_warn_alloc+0x10/0x10 [ 126.502855][ T6876] ? kasan_save_track+0x3e/0x80 [ 126.502881][ T6876] ? __kasan_kmalloc+0x93/0xb0 [ 126.502910][ T6876] ? xsk_setsockopt+0x52a/0x960 [ 126.502934][ T6876] ? do_sock_setsockopt+0x17c/0x1b0 [ 126.502963][ T6876] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 126.502993][ T6876] ? do_syscall_64+0x174/0x580 [ 126.503021][ T6876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.503054][ T6876] __vmalloc_node_range_noprof+0x12c/0x1730 [ 126.503113][ T6876] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.503144][ T6876] ? __kasan_kmalloc+0x93/0xb0 [ 126.503174][ T6876] ? __kmalloc_cache_noprof+0x32d/0x660 [ 126.503202][ T6876] ? __kmalloc_cache_noprof+0x150/0x660 [ 126.503233][ T6876] vmalloc_user_noprof+0xad/0xe0 [ 126.503259][ T6876] ? xskq_create+0xbf/0x170 [ 126.503287][ T6876] xskq_create+0xbf/0x170 [ 126.503318][ T6876] xsk_init_queue+0x8a/0xe0 [ 126.503347][ T6876] xsk_setsockopt+0x52a/0x960 [ 126.503372][ T6876] ? __fget_files+0x2a/0x420 [ 126.503402][ T6876] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.503427][ T6876] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.503466][ T6876] ? aa_sock_opt_perm+0xff/0x1a0 [ 126.503491][ T6876] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 126.503514][ T6876] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.503549][ T6876] do_sock_setsockopt+0x17c/0x1b0 [ 126.503586][ T6876] __x64_sys_setsockopt+0x13d/0x1b0 [ 126.503622][ T6876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.503646][ T6876] do_syscall_64+0x174/0x580 [ 126.503673][ T6876] ? trace_irq_disable+0x3b/0x140 [ 126.503701][ T6876] ? clear_bhb_loop+0x40/0x90 [ 126.503729][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.503751][ T6876] RIP: 0033:0x7f7d6e19de59 [ 126.503773][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.503797][ T6876] RSP: 002b:00007f7d6efc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.503822][ T6876] RAX: ffffffffffffffda RBX: 00007f7d6e426090 RCX: 00007f7d6e19de59 [ 126.503839][ T6876] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 126.503852][ T6876] RBP: 00007f7d6e233e6f R08: 0000000000000004 R09: 0000000000000000 [ 126.503866][ T6876] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.503880][ T6876] R13: 00007f7d6e426128 R14: 00007f7d6e426090 R15: 00007ffece656568 [ 126.503916][ T6876] [ 126.503966][ T6876] Mem-Info: [ 126.792587][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.802509][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.866446][ T6876] active_anon:6492 inactive_anon:0 isolated_anon:0 [ 126.866446][ T6876] active_file:0 inactive_file:42414 isolated_file:0 [ 126.866446][ T6876] unevictable:768 dirty:49 writeback:0 [ 126.866446][ T6876] slab_reclaimable:10254 slab_unreclaimable:95734 [ 126.866446][ T6876] mapped:30252 shmem:1866 pagetables:1320 [ 126.866446][ T6876] sec_pagetables:0 bounce:0 [ 126.866446][ T6876] kernel_misc_reclaimable:0 [ 126.866446][ T6876] free:1336631 free_pcp:8596 free_cma:0 [ 126.972937][ T6876] Node 0 active_anon:23868kB inactive_anon:0kB active_file:0kB inactive_file:169460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125208kB dirty:192kB writeback:0kB shmem:3728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12492kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.100783][ T6876] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.201989][ T6876] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.310196][ T6880] syzkaller0: entered promiscuous mode [ 127.324658][ T6880] syzkaller0: entered allmulticast mode [ 127.359318][ T6876] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 127.374034][ T6876] Node 0 DMA32 free:1384288kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24256kB inactive_anon:0kB active_file:0kB inactive_file:169460kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:28808kB local_pcp:15636kB free_cma:0kB [ 127.412749][ T6876] lowmem_reserve[]: 0 0 0 0 0 [ 127.418527][ T6876] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.477789][ T6876] lowmem_reserve[]: 0 0 0 0 0 [ 127.488411][ T6876] Node 1 Normal free:3947712kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.561454][ T6876] lowmem_reserve[]: 0 0 0 0 0 [ 127.578728][ T6876] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.610143][ T6876] Node 0 DMA32: 714*4kB (UME) 933*8kB (UME) 303*16kB (UM) 231*32kB (UM) 64*64kB (UME) 19*128kB (UM) 15*256kB (UME) 17*512kB (UME) 11*1024kB (UM) 8*2048kB (UME) 321*4096kB (UM) = 1384096kB [ 127.639742][ T6876] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.669280][ T6876] Node 1 Normal: 0*4kB 4*8kB (UM) 10*16kB (UM) 10*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3947712kB [ 127.710299][ T6876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.720507][ T6876] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.737926][ T6876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.757070][ T6876] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.774069][ T6876] 43716 total pagecache pages [ 127.786159][ T6876] 0 pages in swap cache [ 127.824900][ T1594] block nbd0: Connection timed out, retrying (0/2 alive) [ 127.836735][ T1594] block nbd0: Connection timed out, retrying (0/2 alive) [ 127.843058][ T6876] Free swap = 124996kB [ 127.848364][ T1594] block nbd0: Connection timed out, retrying (0/2 alive) [ 127.864838][ T25] block nbd0: Dead connection, failed to find a fallback [ 127.875355][ T25] block nbd0: shutting down sockets [ 127.882502][ T1594] block nbd0: Connection timed out, retrying (0/2 alive) [ 127.888078][ T6876] Total swap = 124996kB [ 127.890596][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.905036][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 127.913530][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.923014][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 127.931059][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.940589][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 127.949866][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.959499][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 127.960572][ T6876] 2097051 pages RAM [ 127.972304][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.991765][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.000208][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.010489][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.018401][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.027867][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.037418][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.045682][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 128.056273][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.064969][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.071104][ T6876] 0 pages HighMem/MovableOnly [ 128.075476][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.089832][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 128.101245][ T5734] ldm_validate_partition_table(): Disk read failed. [ 128.112439][ T5734] Dev nbd0: unable to read RDB block 0 [ 128.122367][ T5734] nbd0: unable to read partition table [ 128.125555][ T6876] 428172 pages reserved [ 128.141190][ T5734] ldm_validate_partition_table(): Disk read failed. [ 128.152933][ T5734] Dev nbd0: unable to read RDB block 0 [ 128.162546][ T5734] nbd0: unable to read partition table [ 128.167547][ T6876] 0 pages cma reserved [ 129.037679][ T6955] __nla_validate_parse: 3 callbacks suppressed [ 129.037713][ T6955] netlink: 165 bytes leftover after parsing attributes in process `syz.4.293'. [ 129.741307][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.172892][ T6964] netlink: 592 bytes leftover after parsing attributes in process `syz.3.295'. [ 130.335947][ T6972] syzkaller1: entered promiscuous mode [ 130.364746][ T6972] syzkaller1: entered allmulticast mode [ 130.402586][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.297'. [ 130.450865][ T6975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 130.512403][ T6983] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 130.652092][ T6987] xt_hashlimit: size too large, truncated to 1048576 [ 131.117449][ T7008] syz_tun: entered allmulticast mode [ 131.253516][ T7014] netlink: 'syz.1.308': attribute type 11 has an invalid length. [ 131.280893][ T7017] syzkaller0: entered promiscuous mode [ 131.281536][ T7014] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.308'. [ 131.296801][ T7017] syzkaller0: entered allmulticast mode [ 131.615602][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 131.669250][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'. [ 131.696376][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'. [ 131.849540][ T7031] geneve2: entered promiscuous mode [ 132.282107][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 132.316056][ T7061] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 132.571456][ T7078] xfrm0: entered allmulticast mode [ 132.704972][ T7084] netlink: 256 bytes leftover after parsing attributes in process `syz.1.325'. [ 132.941466][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951824][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.462550][ T7111] FAULT_INJECTION: forcing a failure. [ 133.462550][ T7111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.477369][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 133.494531][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(full) [ 133.494558][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.494571][ T7111] Call Trace: [ 133.494580][ T7111] [ 133.494589][ T7111] dump_stack_lvl+0xe8/0x150 [ 133.494626][ T7111] should_fail_ex+0x40c/0x560 [ 133.494656][ T7111] _copy_from_user+0x2d/0xb0 [ 133.494689][ T7111] kstrtouint_from_user+0xd6/0x180 [ 133.494719][ T7111] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 133.494763][ T7111] proc_fail_nth_write+0x8e/0x210 [ 133.494793][ T7111] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.494830][ T7111] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.494858][ T7111] vfs_write+0x296/0xba0 [ 133.494897][ T7111] ? __pfx_vfs_write+0x10/0x10 [ 133.494931][ T7111] ? __fget_files+0x2a/0x420 [ 133.494967][ T7111] ? __fget_files+0x3a2/0x420 [ 133.494994][ T7111] ? __fget_files+0x2a/0x420 [ 133.495032][ T7111] ksys_write+0x150/0x270 [ 133.495067][ T7111] ? __pfx_ksys_write+0x10/0x10 [ 133.495109][ T7111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.495134][ T7111] do_syscall_64+0x174/0x580 [ 133.495163][ T7111] ? trace_irq_disable+0x3b/0x140 [ 133.495190][ T7111] ? clear_bhb_loop+0x40/0x90 [ 133.495217][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.495239][ T7111] RIP: 0033:0x7fdd9c35e68e [ 133.495259][ T7111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.495284][ T7111] RSP: 002b:00007fdd9a5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.495307][ T7111] RAX: ffffffffffffffda RBX: 00007fdd9a5f66c0 RCX: 00007fdd9c35e68e [ 133.495323][ T7111] RDX: 0000000000000001 RSI: 00007fdd9a5f60a0 RDI: 0000000000000004 [ 133.495336][ T7111] RBP: 00007fdd9a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.495348][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.495360][ T7111] R13: 00007fdd9c626038 R14: 00007fdd9c625fa0 R15: 00007ffe52fcd418 [ 133.495395][ T7111] [ 134.424797][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 134.470895][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 134.522420][ T7155] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 134.548771][ T7157] vcan1: entered promiscuous mode [ 134.565863][ T7157] vcan1: entered allmulticast mode [ 134.898444][ T7158] bond2: (slave geneve3): making interface the new active one [ 134.909607][ T7158] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 134.946647][ T1175] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.981290][ T1175] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.013859][ T1175] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.057282][ T1175] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.146289][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 135.425610][ T1175] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 135.533499][ T7187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.573982][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 135.835080][ T7211] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 135.868936][ T7212] sch_fq: defrate 237568 ignored. [ 136.082318][ T7233] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 136.090397][ T7233] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 136.098121][ T7233] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 136.106048][ T7233] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 136.237248][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 136.302792][ T7224] sctp: [Deprecated]: syz.2.355 (pid 7224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.302792][ T7224] Use struct sctp_sack_info instead [ 137.420085][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.870269][ T7216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.353495][ T7290] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 139.385799][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 139.388156][ T7299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.373'. [ 139.412813][ T7299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.373'. [ 139.425107][ T7294] syzkaller0: entered promiscuous mode [ 139.432925][ T7294] syzkaller0: entered allmulticast mode [ 139.758085][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 139.806553][ T7316] openvswitch: netlink: Missing key (keys=40, expected=100) [ 139.827385][ T7297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.951291][ T7324] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 140.415942][ T7340] batadv_slave_1: entered promiscuous mode [ 140.453442][ T7339] veth0: entered promiscuous mode [ 140.596414][ T7339] veth0: left promiscuous mode [ 140.642114][ T7339] batadv_slave_1: left promiscuous mode [ 140.987310][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'. [ 141.257864][ T5287] veth0_vlan: left promiscuous mode [ 141.345609][ T5756] veth0_vlan: entered promiscuous mode [ 141.547191][ T7372] bridge0: port 3(ipvlan2) entered blocking state [ 141.571304][ T7372] bridge0: port 3(ipvlan2) entered disabled state [ 141.584235][ T7372] ipvlan2: entered allmulticast mode [ 141.591912][ T7372] bridge0: entered allmulticast mode [ 141.621927][ T7372] ipvlan2: left allmulticast mode [ 141.642795][ T7372] bridge0: left allmulticast mode [ 141.698114][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 141.829724][ T7388] netlink: 84 bytes leftover after parsing attributes in process `syz.1.392'. [ 141.838980][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 141.874937][ T7388] netlink: 84 bytes leftover after parsing attributes in process `syz.1.392'. [ 142.083173][ T7398] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.113988][ T7395] netlink: 'syz.3.394': attribute type 21 has an invalid length. [ 142.644811][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 142.700123][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 143.209235][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 143.429435][ T7447] netlink: 'syz.1.405': attribute type 33 has an invalid length. [ 143.846902][ T7447] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 143.897264][ T7447] bond1 (unregistering): Released all slaves [ 145.095174][ T7501] netlink: 'syz.3.423': attribute type 21 has an invalid length. [ 145.129167][ T7501] __nla_validate_parse: 2 callbacks suppressed [ 145.129215][ T7501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.423'. [ 145.224517][ T7506] netlink: 288 bytes leftover after parsing attributes in process `syz.2.425'. [ 145.308553][ T7511] team0: entered promiscuous mode [ 145.314721][ T7511] team_slave_0: entered promiscuous mode [ 145.321939][ T7511] team_slave_1: entered promiscuous mode [ 145.328023][ T7511] team0: entered allmulticast mode [ 145.334451][ T7511] team_slave_0: entered allmulticast mode [ 145.342418][ T7511] team_slave_1: entered allmulticast mode [ 145.640472][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 145.988439][ T7536] netlink: 84 bytes leftover after parsing attributes in process `syz.2.434'. [ 145.997820][ T7536] netlink: 88 bytes leftover after parsing attributes in process `syz.2.434'. [ 146.584400][ T7571] netlink: 'syz.4.442': attribute type 4 has an invalid length. [ 146.603077][ T7571] netlink: 'syz.4.442': attribute type 10 has an invalid length. [ 146.631767][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.645348][ T7571] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.794527][ T7536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.183459][ T7583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.446'. [ 149.679485][ T7595] netlink: 'syz.4.453': attribute type 12 has an invalid length. [ 150.407343][ T7624] netlink: 'syz.2.461': attribute type 2 has an invalid length. [ 150.444142][ T7624] netlink: 'syz.2.461': attribute type 2 has an invalid length. [ 150.498773][ T7624] netlink: 6212 bytes leftover after parsing attributes in process `syz.2.461'. [ 150.553328][ T7625] bridge3: entered promiscuous mode [ 150.584046][ T7625] bridge3: entered allmulticast mode [ 150.717334][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'. [ 150.943003][ T7641] openvswitch: netlink: Message has 1 unknown bytes. [ 150.966924][ T7641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.013351][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 151.257466][ T7650] block nbd0: Unsupported socket: should be TCP or UNIX. [ 151.475179][ T7652] tunl0: entered promiscuous mode [ 151.516436][ T7652] netlink: 'syz.4.469': attribute type 3 has an invalid length. [ 151.574180][ T7652] netlink: 9 bytes leftover after parsing attributes in process `syz.4.469'. [ 151.691933][ T7652] openvswitch: netlink: Missing valid actions attribute. [ 151.729654][ T7652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.756407][ T7667] netlink: 156 bytes leftover after parsing attributes in process `syz.1.472'. [ 151.805387][ T7664] bridge0: port 3(syz_tun) entered blocking state [ 151.820082][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 151.845390][ T7664] bridge0: port 3(syz_tun) entered disabled state [ 151.877438][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 151.897418][ T7664] syz_tun: entered allmulticast mode [ 151.935843][ T7664] syz_tun: entered promiscuous mode [ 152.006669][ T7635] trusted_key: syz.2.464 sent an empty control message without MSG_MORE. [ 152.139141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.252961][ T7697] bond2: entered promiscuous mode [ 152.320503][ T7706] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 152.611006][ T7720] macvlan0: entered promiscuous mode [ 152.646726][ T7720] veth1_vlan: entered promiscuous mode [ 152.747646][ T7730] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 153.045308][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 153.111552][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.162910][ T7730] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 153.176075][ T7731] tipc: Enabling of bearer rejected, failed to enable media [ 154.032981][ T7777] 8021q: VLANs not supported on lo [ 154.279401][ T7786] gtp0: entered promiscuous mode [ 154.307572][ T7786] gtp0: entered allmulticast mode [ 154.392241][ T7787] gtp1: entered promiscuous mode [ 154.413890][ T7787] gtp1: entered allmulticast mode [ 154.706174][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 154.713395][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 154.720682][ T6920] block nbd2: Dead connection, failed to find a fallback [ 154.729320][ T6920] block nbd2: shutting down sockets [ 154.735039][ T6920] blk_print_req_error: 121 callbacks suppressed [ 154.735056][ T6920] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.752339][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 154.761202][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 154.769402][ T6920] buffer_io_error: 138 callbacks suppressed [ 154.769419][ T6920] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.783526][ T6920] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.792706][ T6920] Buffer I/O error on dev nbd2, logical block 3, async page read [ 154.800620][ T6920] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.810873][ T6920] Buffer I/O error on dev nbd2, logical block 2, async page read [ 154.818717][ T6920] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.827853][ T6920] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.837587][ T6920] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.847770][ T6920] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.855762][ T6920] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.864014][ T6920] Buffer I/O error on dev nbd2, logical block 2, async page read [ 154.871979][ T6920] Buffer I/O error on dev nbd2, logical block 3, async page read [ 154.882672][ T6920] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.891958][ T6920] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.899826][ T6920] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.915094][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.930362][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.944813][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.959754][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.974346][ T5944] ldm_validate_partition_table(): Disk read failed. [ 155.003265][ T5944] Dev nbd2: unable to read RDB block 0 [ 155.028779][ T5944] nbd2: unable to read partition table [ 155.074284][ T5944] ldm_validate_partition_table(): Disk read failed. [ 155.087845][ T5944] Dev nbd2: unable to read RDB block 0 [ 155.103088][ T5944] nbd2: unable to read partition table [ 155.706645][ T7816] bond1: option resend_igmp: invalid value (32767) [ 155.754408][ T7816] bond1: option resend_igmp: allowed values 0 - 255 [ 155.807203][ T7816] bond1 (unregistering): Released all slaves [ 155.946235][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 156.183288][ T7837] team0: Port device team_slave_0 removed [ 156.495864][ T7848] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 156.912869][ T7866] netlink: 76 bytes leftover after parsing attributes in process `syz.4.514'. [ 157.081037][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 157.251798][ T7887] IPVS: length: 135 != 24 [ 157.378693][ T7879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.491655][ T7885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.627095][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 157.670703][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 157.714240][ T7900] netlink: 'syz.3.522': attribute type 3 has an invalid length. [ 157.785967][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.525'. [ 158.179790][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 159.454931][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 159.486917][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 159.930590][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 160.046741][ T7969] geneve2: entered promiscuous mode [ 160.400693][ T7983] GUP no longer grows the stack in syz.4.546 (7983): 200000003000-20000000a000 (200000001000) [ 160.470012][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.4.546 Not tainted syzkaller #0 PREEMPT(full) [ 160.470043][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.470056][ T7983] Call Trace: [ 160.470065][ T7983] [ 160.470074][ T7983] dump_stack_lvl+0xe8/0x150 [ 160.470112][ T7983] __get_user_pages+0x238c/0x2720 [ 160.470146][ T7983] ? __gup_longterm_locked+0xc3b/0x15c0 [ 160.470193][ T7983] __gup_longterm_locked+0xd52/0x15c0 [ 160.470218][ T7983] ? lock_acquire+0x106/0x350 [ 160.470263][ T7983] gup_fast_fallback+0x1d8c/0x20e0 [ 160.470315][ T7983] ? __pfx_gup_fast_fallback+0x10/0x10 [ 160.470339][ T7983] ? is_valid_gup_args+0x11f/0x200 [ 160.470361][ T7983] ? get_user_pages_fast+0x4d/0xb0 [ 160.470384][ T7983] __iov_iter_get_pages_alloc+0x378/0xa40 [ 160.470423][ T7983] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 160.470458][ T7983] iov_iter_get_pages2+0x5e/0xa0 [ 160.470495][ T7983] __se_sys_vmsplice+0x7b5/0x1660 [ 160.470551][ T7983] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 160.470596][ T7983] ? __pfx_futex_wait+0x10/0x10 [ 160.470689][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.470713][ T7983] do_syscall_64+0x174/0x580 [ 160.470740][ T7983] ? trace_irq_disable+0x3b/0x140 [ 160.470767][ T7983] ? clear_bhb_loop+0x40/0x90 [ 160.470794][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.470814][ T7983] RIP: 0033:0x7f2de399de59 [ 160.470835][ T7983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.470853][ T7983] RSP: 002b:00007f2de4852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 160.470874][ T7983] RAX: ffffffffffffffda RBX: 00007f2de3c25fa0 RCX: 00007f2de399de59 [ 160.470889][ T7983] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 160.470903][ T7983] RBP: 00007f2de3a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 160.470916][ T7983] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 160.470929][ T7983] R13: 00007f2de3c26038 R14: 00007f2de3c25fa0 R15: 00007ffd920a34f8 [ 160.470962][ T7983] [ 160.900012][ T7985] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 161.212186][ T7997] xt_TCPMSS: Only works on TCP SYN packets [ 161.239352][ T8000] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 161.258498][ T8004] __nla_validate_parse: 1 callbacks suppressed [ 161.258519][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 161.609029][ T8014] syzkaller0: entered promiscuous mode [ 161.625899][ T8014] syzkaller0: entered allmulticast mode [ 161.656003][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 161.658447][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 161.671106][ T8013] syzkaller0: entered promiscuous mode [ 161.685792][ T8013] syzkaller0: entered allmulticast mode [ 161.693660][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 161.718869][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 161.845465][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 161.913765][ T8030] netlink: 'syz.1.558': attribute type 16 has an invalid length. [ 161.942101][ T8030] netlink: 'syz.1.558': attribute type 3 has an invalid length. [ 161.976409][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 162.124449][ T8038] xt_hashlimit: size too large, truncated to 1048576 [ 162.389866][ T8035] xt_hashlimit: size too large, truncated to 1048576 [ 162.607988][ T8059] Cannot find add_set index 0 as target [ 162.631438][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 163.445090][ T8078] bond0: entered promiscuous mode [ 163.455376][ T8078] bond_slave_0: entered promiscuous mode [ 163.463376][ T8078] bond_slave_1: entered promiscuous mode [ 163.470679][ T8078] batadv0: entered promiscuous mode [ 163.807840][ T8086] IPv6: Can't replace route, no match found [ 163.903227][ T8089] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 165.958772][ T8065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.359429][ T8106] erspan0: entered allmulticast mode [ 166.864453][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 166.964318][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 167.505496][ T8145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.623453][ T5640] block nbd0: Receive control failed (result -107) [ 167.639356][ T8147] block nbd0: reconnected socket [ 167.670680][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 167.680339][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 167.724219][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 167.802422][ T8154] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.956621][ T8157] netlink: 'syz.2.590': attribute type 4 has an invalid length. [ 168.569500][ T8183] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 168.615477][ T8183] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 168.742364][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 168.795738][ T8190] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 168.813860][ T8195] veth0_macvtap: left promiscuous mode [ 169.081491][ T8195] [ 169.083908][ T8195] ====================================================== [ 169.090962][ T8195] WARNING: possible circular locking dependency detected [ 169.098016][ T8195] syzkaller #0 Not tainted [ 169.102468][ T8195] ------------------------------------------------------ [ 169.109632][ T8195] syz.2.595/8195 is trying to acquire lock: [ 169.115563][ T8195] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 169.125474][ T8195] [ 169.125474][ T8195] but task is already holding lock: [ 169.132878][ T8195] ffffffff8f5e34c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 169.141641][ T8195] [ 169.141641][ T8195] which lock already depends on the new lock. [ 169.141641][ T8195] [ 169.152098][ T8195] [ 169.152098][ T8195] the existing dependency chain (in reverse order) is: [ 169.161166][ T8195] [ 169.161166][ T8195] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 169.168455][ T8195] __mutex_lock+0x19d/0x1550 [ 169.173643][ T8195] get_device_parent+0x16f/0x3a0 [ 169.179182][ T8195] device_add+0x2d4/0xb80 [ 169.184111][ T8195] device_create+0x269/0x300 [ 169.189289][ T8195] msr_device_create+0x33/0x50 [ 169.194654][ T8195] cpuhp_invoke_callback+0x434/0x810 [ 169.200554][ T8195] cpuhp_thread_fun+0x362/0x780 [ 169.205993][ T8195] smpboot_thread_fn+0x57c/0xa80 [ 169.211507][ T8195] kthread+0x388/0x470 [ 169.216171][ T8195] ret_from_fork+0x514/0xb70 [ 169.221348][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.226772][ T8195] [ 169.226772][ T8195] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 169.234398][ T8195] cpuhp_thread_fun+0x127/0x780 [ 169.239851][ T8195] smpboot_thread_fn+0x57c/0xa80 [ 169.245367][ T8195] kthread+0x388/0x470 [ 169.250022][ T8195] ret_from_fork+0x514/0xb70 [ 169.255191][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.260527][ T8195] [ 169.260527][ T8195] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 169.268334][ T8195] cpus_read_lock+0x42/0x160 [ 169.273515][ T8195] static_key_slow_inc+0x12/0x30 [ 169.279039][ T8195] nbd_genl_reconfigure+0x1301/0x1e80 [ 169.284987][ T8195] genl_family_rcv_msg_doit+0x233/0x340 [ 169.291146][ T8195] genl_rcv_msg+0x614/0x7a0 [ 169.296245][ T8195] netlink_rcv_skb+0x226/0x4a0 [ 169.301604][ T8195] genl_rcv+0x28/0x40 [ 169.306190][ T8195] netlink_unicast+0x7bb/0x940 [ 169.311759][ T8195] netlink_sendmsg+0x813/0xb40 [ 169.317224][ T8195] sock_sendmsg_nosec+0x13a/0x180 [ 169.322825][ T8195] ____sys_sendmsg+0x54e/0x850 [ 169.328189][ T8195] ___sys_sendmsg+0x2a5/0x360 [ 169.333472][ T8195] __x64_sys_sendmsg+0x1b1/0x290 [ 169.339012][ T8195] do_syscall_64+0x174/0x580 [ 169.344202][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.351029][ T8195] [ 169.351029][ T8195] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 169.358829][ T8195] __mutex_lock+0x19d/0x1550 [ 169.364008][ T8195] nbd_queue_rq+0x373/0x1150 [ 169.369180][ T8195] blk_mq_dispatch_rq_list+0x499/0x1990 [ 169.375414][ T8195] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 169.382429][ T8195] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 169.389005][ T8195] blk_mq_run_work_fn+0x16c/0x300 [ 169.394601][ T8195] process_scheduled_works+0xa8e/0x14e0 [ 169.400716][ T8195] worker_thread+0xa47/0xfb0 [ 169.405887][ T8195] kthread+0x388/0x470 [ 169.410545][ T8195] ret_from_fork+0x514/0xb70 [ 169.415817][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.421156][ T8195] [ 169.421156][ T8195] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 169.428442][ T8195] __mutex_lock+0x19d/0x1550 [ 169.433624][ T8195] nbd_queue_rq+0xc1/0x1150 [ 169.438725][ T8195] blk_mq_dispatch_rq_list+0x499/0x1990 [ 169.445056][ T8195] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 169.451967][ T8195] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 169.458522][ T8195] blk_mq_run_work_fn+0x16c/0x300 [ 169.464106][ T8195] process_scheduled_works+0xa8e/0x14e0 [ 169.470215][ T8195] worker_thread+0xa47/0xfb0 [ 169.475410][ T8195] kthread+0x388/0x470 [ 169.480054][ T8195] ret_from_fork+0x514/0xb70 [ 169.485222][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.490565][ T8195] [ 169.490565][ T8195] -> #5 (set->srcu){.+.+}-{0:0}: [ 169.497740][ T8195] __synchronize_srcu+0xc9/0x2f0 [ 169.503338][ T8195] elevator_switch+0x1e8/0x7b0 [ 169.508758][ T8195] elevator_change+0x2fa/0x480 [ 169.514079][ T8195] elevator_set_default+0x375/0x440 [ 169.519842][ T8195] blk_register_queue+0x3f3/0x4e0 [ 169.525443][ T8195] __add_disk+0x6cb/0xe30 [ 169.530358][ T8195] add_disk_fwnode+0xfb/0x4b0 [ 169.535867][ T8195] nbd_dev_add+0x733/0xb60 [ 169.541242][ T8195] nbd_init+0x15f/0x1e0 [ 169.546061][ T8195] do_one_initcall+0x250/0x870 [ 169.551454][ T8195] do_initcall_level+0x10a/0x1a0 [ 169.556972][ T8195] do_initcalls+0x59/0xa0 [ 169.561884][ T8195] kernel_init_freeable+0x29d/0x3e0 [ 169.567658][ T8195] kernel_init+0x1d/0x1d0 [ 169.572554][ T8195] ret_from_fork+0x514/0xb70 [ 169.577716][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.583052][ T8195] [ 169.583052][ T8195] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 169.591010][ T8195] __mutex_lock+0x19d/0x1550 [ 169.596181][ T8195] elevator_change+0x1af/0x480 [ 169.601510][ T8195] elevator_set_none+0xb5/0x140 [ 169.607018][ T8195] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 169.613482][ T8195] nbd_start_device+0x189/0xb30 [ 169.618901][ T8195] nbd_genl_connect+0x1597/0x1c10 [ 169.624585][ T8195] genl_family_rcv_msg_doit+0x233/0x340 [ 169.630690][ T8195] genl_rcv_msg+0x614/0x7a0 [ 169.635754][ T8195] netlink_rcv_skb+0x226/0x4a0 [ 169.641080][ T8195] genl_rcv+0x28/0x40 [ 169.645616][ T8195] netlink_unicast+0x7bb/0x940 [ 169.650940][ T8195] netlink_sendmsg+0x813/0xb40 [ 169.656356][ T8195] sock_sendmsg_nosec+0x13a/0x180 [ 169.661952][ T8195] ____sys_sendmsg+0x54e/0x850 [ 169.667281][ T8195] ___sys_sendmsg+0x2a5/0x360 [ 169.672521][ T8195] __x64_sys_sendmsg+0x1b1/0x290 [ 169.678025][ T8195] do_syscall_64+0x174/0x580 [ 169.683318][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.689769][ T8195] [ 169.689769][ T8195] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 169.698426][ T8195] blk_alloc_queue+0x544/0x690 [ 169.703768][ T8195] __blk_mq_alloc_disk+0x194/0x390 [ 169.709450][ T8195] nbd_dev_add+0x494/0xb60 [ 169.714431][ T8195] nbd_init+0x15f/0x1e0 [ 169.719163][ T8195] do_one_initcall+0x250/0x870 [ 169.724490][ T8195] do_initcall_level+0x10a/0x1a0 [ 169.729985][ T8195] do_initcalls+0x59/0xa0 [ 169.734890][ T8195] kernel_init_freeable+0x29d/0x3e0 [ 169.740687][ T8195] kernel_init+0x1d/0x1d0 [ 169.745654][ T8195] ret_from_fork+0x514/0xb70 [ 169.750892][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.756216][ T8195] [ 169.756216][ T8195] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 169.763575][ T8195] fs_reclaim_acquire+0x71/0x100 [ 169.769094][ T8195] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 169.775376][ T8195] alloc_inode+0xb8/0x1b0 [ 169.780371][ T8195] iget_locked+0x131/0x6a0 [ 169.785442][ T8195] kernfs_get_inode+0x4f/0x770 [ 169.790766][ T8195] kernfs_get_tree+0x5cd/0x980 [ 169.796097][ T8195] vfs_get_tree+0x92/0x2a0 [ 169.801204][ T8195] do_new_mount+0x319/0xdc0 [ 169.806313][ T8195] __se_sys_mount+0x31d/0x420 [ 169.811562][ T8195] do_syscall_64+0x174/0x580 [ 169.816799][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.823407][ T8195] [ 169.823407][ T8195] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 169.831530][ T8195] down_write+0x96/0x200 [ 169.836519][ T8195] kernfs_remove_by_name_ns+0x4e/0x140 [ 169.842666][ T8195] device_links_driver_bound+0x4ab/0x1440 [ 169.848950][ T8195] driver_bound+0xd8/0x2e0 [ 169.853927][ T8195] really_probe+0x774/0xae0 [ 169.859075][ T8195] __driver_probe_device+0x1e8/0x360 [ 169.864916][ T8195] driver_probe_device+0x4f/0x240 [ 169.870586][ T8195] __device_attach_driver+0x270/0x410 [ 169.876512][ T8195] bus_for_each_drv+0x258/0x2f0 [ 169.881932][ T8195] __device_attach+0x2c4/0x450 [ 169.887295][ T8195] device_initial_probe+0xa1/0xd0 [ 169.892885][ T8195] bus_probe_device+0x12a/0x220 [ 169.898313][ T8195] device_add+0x7d7/0xb80 [ 169.903208][ T8195] faux_device_create_with_groups+0x1a5/0x2b0 [ 169.909836][ T8195] regulator_dummy_init+0x19/0x40 [ 169.915475][ T8195] regulator_init+0xca/0x110 [ 169.920847][ T8195] do_one_initcall+0x250/0x870 [ 169.926176][ T8195] do_initcall_level+0x10a/0x1a0 [ 169.931677][ T8195] do_initcalls+0x59/0xa0 [ 169.936570][ T8195] kernel_init_freeable+0x29d/0x3e0 [ 169.942362][ T8195] kernel_init+0x1d/0x1d0 [ 169.947277][ T8195] ret_from_fork+0x514/0xb70 [ 169.952436][ T8195] ret_from_fork_asm+0x1a/0x30 [ 169.957839][ T8195] [ 169.957839][ T8195] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 169.966490][ T8195] __lock_acquire+0x1520/0x2cf0 [ 169.971906][ T8195] lock_acquire+0x106/0x350 [ 169.976974][ T8195] down_read+0x4a/0x330 [ 169.981905][ T8195] kernfs_remove+0x35/0x80 [ 169.986904][ T8195] __kobject_del+0xe0/0x310 [ 169.991997][ T8195] kobject_del+0x45/0x60 [ 169.996832][ T8195] cleanup_glue_dir+0x1a3/0x220 [ 170.002251][ T8195] device_del+0x77d/0x8f0 [ 170.007137][ T8195] device_destroy+0xb2/0x1a0 [ 170.012309][ T8195] macvtap_device_event+0x226/0x400 [ 170.018071][ T8195] notifier_call_chain+0x1a5/0x3d0 [ 170.023749][ T8195] unregister_netdevice_many_notify+0x17de/0x2150 [ 170.030727][ T8195] rtnl_dellink+0x5be/0x810 [ 170.035806][ T8195] rtnetlink_rcv_msg+0x802/0xc00 [ 170.041305][ T8195] netlink_rcv_skb+0x226/0x4a0 [ 170.046636][ T8195] netlink_unicast+0x7bb/0x940 [ 170.051965][ T8195] netlink_sendmsg+0x813/0xb40 [ 170.057290][ T8195] sock_sendmsg_nosec+0x13a/0x180 [ 170.063057][ T8195] ____sys_sendmsg+0x54e/0x850 [ 170.068480][ T8195] ___sys_sendmsg+0x2a5/0x360 [ 170.073747][ T8195] __x64_sys_sendmsg+0x1b1/0x290 [ 170.079377][ T8195] do_syscall_64+0x174/0x580 [ 170.084529][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.091107][ T8195] [ 170.091107][ T8195] other info that might help us debug this: [ 170.091107][ T8195] [ 170.101384][ T8195] Chain exists of: [ 170.101384][ T8195] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 170.101384][ T8195] [ 170.114914][ T8195] Possible unsafe locking scenario: [ 170.114914][ T8195] [ 170.122414][ T8195] CPU0 CPU1 [ 170.127809][ T8195] ---- ---- [ 170.133310][ T8195] lock(gdp_mutex); [ 170.137245][ T8195] lock(cpuhp_state-up); [ 170.144142][ T8195] lock(gdp_mutex); [ 170.150601][ T8195] rlock(&root->kernfs_supers_rwsem); [ 170.156106][ T8195] [ 170.156106][ T8195] *** DEADLOCK *** [ 170.156106][ T8195] [ 170.164275][ T8195] 2 locks held by syz.2.595/8195: [ 170.169338][ T8195] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 170.178394][ T8195] #1: ffffffff8f5e34c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 170.187601][ T8195] [ 170.187601][ T8195] stack backtrace: [ 170.193527][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.2.595 Not tainted syzkaller #0 PREEMPT(full) [ 170.193553][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.193564][ T8195] Call Trace: [ 170.193574][ T8195] [ 170.193584][ T8195] dump_stack_lvl+0xe8/0x150 [ 170.193617][ T8195] print_circular_bug+0x2e1/0x300 [ 170.193638][ T8195] check_noncircular+0x12e/0x150 [ 170.193672][ T8195] __lock_acquire+0x1520/0x2cf0 [ 170.193710][ T8195] ? kernfs_remove+0x35/0x80 [ 170.193736][ T8195] lock_acquire+0x106/0x350 [ 170.193762][ T8195] ? kernfs_remove+0x35/0x80 [ 170.193795][ T8195] down_read+0x4a/0x330 [ 170.193823][ T8195] ? kernfs_remove+0x35/0x80 [ 170.193852][ T8195] kernfs_remove+0x35/0x80 [ 170.193880][ T8195] __kobject_del+0xe0/0x310 [ 170.193911][ T8195] kobject_del+0x45/0x60 [ 170.193939][ T8195] cleanup_glue_dir+0x1a3/0x220 [ 170.193965][ T8195] device_del+0x77d/0x8f0 [ 170.193988][ T8195] ? __pfx_device_del+0x10/0x10 [ 170.194006][ T8195] ? kobject_put+0x50f/0x550 [ 170.194037][ T8195] device_destroy+0xb2/0x1a0 [ 170.194056][ T8195] ? __pfx_device_destroy+0x10/0x10 [ 170.194079][ T8195] ? kernfs_remove_by_name_ns+0x101/0x140 [ 170.194111][ T8195] macvtap_device_event+0x226/0x400 [ 170.194138][ T8195] ? __pfx_macvtap_device_event+0x10/0x10 [ 170.194169][ T8195] notifier_call_chain+0x1a5/0x3d0 [ 170.194199][ T8195] unregister_netdevice_many_notify+0x17de/0x2150 [ 170.194227][ T8195] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 170.194252][ T8195] ? netdev_upper_dev_unlink+0x99/0xe0 [ 170.194277][ T8195] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 170.194304][ T8195] ? macvlan_dellink+0x3e4/0x470 [ 170.194323][ T8195] ? __pfx_macvtap_dellink+0x10/0x10 [ 170.194349][ T8195] ? __pfx_macvtap_dellink+0x10/0x10 [ 170.194374][ T8195] rtnl_dellink+0x5be/0x810 [ 170.194402][ T8195] ? __pfx_rtnl_dellink+0x10/0x10 [ 170.194460][ T8195] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 170.194485][ T8195] ? __pfx_rtnl_dellink+0x10/0x10 [ 170.194516][ T8195] ? __pfx_rtnl_dellink+0x10/0x10 [ 170.194542][ T8195] rtnetlink_rcv_msg+0x802/0xc00 [ 170.194569][ T8195] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 170.194593][ T8195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.194617][ T8195] ? ref_tracker_free+0x689/0x830 [ 170.194642][ T8195] ? __pfx_ref_tracker_free+0x10/0x10 [ 170.194666][ T8195] ? __asan_memcpy+0x40/0x70 [ 170.194685][ T8195] ? __skb_clone+0x5c/0x6c0 [ 170.194716][ T8195] netlink_rcv_skb+0x226/0x4a0 [ 170.194746][ T8195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.194773][ T8195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.194806][ T8195] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.194835][ T8195] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.194866][ T8195] netlink_unicast+0x7bb/0x940 [ 170.194897][ T8195] netlink_sendmsg+0x813/0xb40 [ 170.194931][ T8195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.194966][ T8195] ? kasan_save_free_info+0x40/0x50 [ 170.194986][ T8195] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.195006][ T8195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.195036][ T8195] sock_sendmsg_nosec+0x13a/0x180 [ 170.195059][ T8195] ____sys_sendmsg+0x54e/0x850 [ 170.195090][ T8195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.195122][ T8195] ? import_iovec+0x73/0xa0 [ 170.195150][ T8195] ___sys_sendmsg+0x2a5/0x360 [ 170.195177][ T8195] ? __lock_acquire+0x683/0x2cf0 [ 170.195205][ T8195] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.195235][ T8195] ? tomoyo_path_number_perm+0x219/0x5f0 [ 170.195275][ T8195] ? __fget_files+0x2a/0x420 [ 170.195301][ T8195] ? __fget_files+0x3a2/0x420 [ 170.195330][ T8195] __x64_sys_sendmsg+0x1b1/0x290 [ 170.195358][ T8195] ? __pfx_kcov_ioctl+0x10/0x10 [ 170.195380][ T8195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.195412][ T8195] ? __pfx_kcov_ioctl+0x10/0x10 [ 170.195436][ T8195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.195459][ T8195] do_syscall_64+0x174/0x580 [ 170.195486][ T8195] ? clear_bhb_loop+0x40/0x90 [ 170.195505][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.195527][ T8195] RIP: 0033:0x7f7d6e19de59 [ 170.195546][ T8195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.195562][ T8195] RSP: 002b:00007f7d6efc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.195584][ T8195] RAX: ffffffffffffffda RBX: 00007f7d6e426090 RCX: 00007f7d6e19de59 [ 170.195597][ T8195] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 170.195609][ T8195] RBP: 00007f7d6e233e6f R08: 0000000000000000 R09: 0000000000000000 [ 170.195622][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.195632][ T8195] R13: 00007f7d6e426128 R14: 00007f7d6e426090 R15: 00007ffece656568 [ 170.195654][ T8195] [ 170.561734][ T8221] netlink: 'syz.0.604': attribute type 21 has an invalid length. [ 170.604279][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 170.670922][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 170.801987][ T8221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.604'.