last executing test programs: 2.596923363s ago: executing program 1 (id=2135): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x3, 0x4, 0xb}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x5c, &(0x7f0000000280)=""/92, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x1, 0x10, 0xa}, {0x5, 0x3, 0xe}, {0x1, 0x5, 0x7}, {0x1, 0x4, 0x3, 0xb}], 0x10, 0x5}, 0x94) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000c80)={{r1}, "f97be55deb3e41d2efa805ac4a21154add1a8776e7f1ab2915b01a72ea4625b003d2b7e768f0c2d3e4ac617b8ddd29bfa60f22b69475f6de24122cf8de0f0a8f7ede4bc5bb02c5597e1ae58d3814eadcc9ead71b77a86feda7ca8cf4a46f8971624c8d85ef1fac8f85aba4ca6066fd94796e9ffa0834f9551b3f16db9b9ae37239ff0a8f1bf69eb41f098651ce6d54201e0f7b6116d0d03e22cad4db062af8ac233028efadd90613a0343a9c6c48a2d6b7e57b82c0ba05454e82677f6bfae4f7f6074c4c308d1ccd3e0e1fc343521df707e7f3a51c324a5ae052acf60990e3332c3c61140fb744ef061c6299bae0c0a363dd898e63f8201a036cb37fe4a86012b744990391b924ffefa3b09ca05abc4b2256ac62a6888b6905d173f365e855ebf3117582b945be2a2f3b4028f5a50977206c4746042acc5a13a5057310fd216af0aa79b40bd35ebd61a960826939691b2d2cc1e5fa94281c6e684cc129ebf997ce7758815a4ec47caad2f44aba587ea4a1c1c77db81d750b976954e70aba36a77a90b929ab243864588b80b88d8ea110aa945c151d7986163051cf5bcc706a08139cb5a21f81036d94655adfd35571c95e55eae453f1b8962e5038b8c12cb4303c8df23eda6a4eec41375ddc1c047a00b6ccb2c0ec957e364a7da40c6ad6597cd7a28ed8b7f46447e9b12e0b21d4c84c11db5e7810e265b88a9edbbf96873325c4f03655fda88101b1e276de4f0f4e83aa02e25c01264c887c8cf0b8ed11573263448b55593931c197d7197af02bc0e1d758706435baa615ba320abcbc894f93ecbcf753c6a48e06ab18471e3c490b6ca10b8abb3abc3112ee98a1c568e5ae6296138aad233b6717c5731596e33e35d6b255ee3f730578da2dc545de91e009827658a9306d7af159b8f8e4e2c5337addb69d464d9fa1035c7685835fc7971d1feff5591718e2d2043016de076fb74c33f3ebb82d4b8f6eaa38205aff4f5dc7d416ecdbd903ff803d42d31b991ebfc02e9edc87fb72d4c0692c5712f8770077b300c05bcdb68a499d3fd1cf7279bff7778b5304a4a988328712be8c35351981eb7c3aca0b5117f606ecc43b4808385dea0a3f73f70f03eed0841962e2d83307448bf64f13e91ef48a969b50340a0b095f1a57eaa888a494121344ce220bd45fec1d396c7f1c7aa9ac311ccbc59d7c2db270754b5a4ce7be91725f972cc69d5cc3b03b0f1c745fbb20b69e35421f2430d0b943763135afa56de938677a7f382a28e728d8a7843130a7166ded3b839a5829eebe9fad5b39d404ffbd6cf4e0e69d6a8730515221fd5f6506d708ec9831b34b4bb1db53ac40fe416d7dd808f2694f1bab4c6c127c100b197d2d6b1557cd016896de6993f7790b17a797ba255355663bbe57053320aa3819f4ac10a087181121485cd578473da07aef0f2c9be3e4c80a1441f52326acf6c6ed6d9d608ba7e3e041661e1efd0aae2556257dfc74bd689a78fd7d4e615def2f07e1f57ee65334bd103db73ba868543e083ba7bb0b6487e001a92fa29cedec7ec3424feff6d32070c87cb17d628132344b0cdc624cd0a2f1a3a7ca4903cde87074e83de73c142006c592971143c1e837ada7562353775793154599cf6a67703c4402b358a6401a0281588c0e612a46ead9202aaac5d32e45e6e6126551e93f7f1d46dba83eeb523f7512ec8c0e52104dfea89d70d147944a5fd65eff8f1458c4b58214bb47283f0271998be018f4ea39dec20cfcf5604f78c03f0ed70de9d2c3108b7a8058ce321dd805a5a4d52307af9e770cd838a4370017a174ee5b1941d190ce169c532f17bcf6cc6e41b294572fe7476cedbd527bf9cc1c40221d7d48f0f871be9cbc35eb067600f8ef2221c61c871ada6c7f5e07357e6c0b6dc6f205940fd7ae217a02dc1233064ed92bcf74fe3c5078840977bf9caa9387039458871ff98655e59aa9bbac31169ed94cf19d6d89d6ca151a4359acfd14a5812f384b7ed2fedb612e5dd672ea00ed2173fe7984801325bf2c062c373bedd7a8880bd77807a5e5c827f2869fba31405e4d107bb2dfb573a1469aae037a852f60ecca73c6eb34eabd9502184e8ed50793ae358141fd1dfd93f47250272a4a411012489b00a7ccfe8f974e8a3e375fed6911e2eed1807c805a66f638ba4e2a57c6a234890d87a664a40aecf083b1f2f5202e5a5bae4e68d60905a24bc30863deea51beadd55c525cc4bbbfbb12d836af389b2995ef87b39612f12370aa5e7c3318995a3bbbc998bb6184907f4f9154e452aa676cf4a33c739105420df054292a74862296616bdab0032bec580003c9b1850d437dde447683c9a2034434aaae6400373c21a54e7e55b1684f016ae9b4504de9837754ba7ab9e6c5b53dd81b1aa38a0e5f7c3dc7cf021b924d76f5b3ec6b392abb3f2385e4083198c9e42946857a432b3680ef9b1c9cafb667a1749511967221d402206d42573e34ec962e9327a572fb1e71c644b175a4d30e74d27fb658a23a59337521d176c363c693712449c53f5351620b185c25be45b935aecd3ab76618b28287b5241736eb9e364f5910f18435861e103162241e3144a4bc5d9343f6de3cf88c98684f52250a387c51e60dbd226eeca57a0133efe0244148af0321083ca10ad933d570f306bb9097f106423f6cec38fdc2bad8c6c11dfe03bcc26add08dd527da8d7c76e56a7e6241d44ebcf0256337650031240fe8e0aba34a39e8722fe58a9c029ebd40f6f847fd6f4221640ee18862b689b34e8a1c871de69f4cf59825eb98e3f540b9351e921883bf00092b2da39a9dac9a3db54751640e55fc735c9a30ac66531b7f30f139e893b92c5ab6d53d51f49a3859b0b5f812e8048197075a3f2da6970a2aa0046afc0575fe1ae12d13a1a06999db6e9654ea265a7124fce0341c18cfe6b59f4bcaf33fd9ba3308c796ebba0e1ac3803edc52560a49fb9b7c81b2d2ef61990826cce069ea4563e793d9f5896f8e7a0b0496fdc3f501f9f10406d22fb5c9ae519df8f7307c9c33dc6ae918097797ae0f73e4289e6277099c79b866699c4dd680ce007669aacbc9bb6b2aed0059c822e12b9bf5bcd7c86f89745bb29e71604636f39683768bc38e25db921417b8b6f648fbf16d3bb46cd7eace3bcc29efaa076f6911c9a08de7af1efe4c9933f437ff8ec52edeb3ac0fe4310911faf2da36ca61f8820c4a5e69603576ff1891b179a06f479fc53da897b4922c10d4fd82f693bd8e37b9bd20a5779edb36ac2dc8502ef21f6fa9c2b91899cee35561e233832669a12acd31da9d348d0be9e5d5d3bb4d2fa6952c0c970bd7833ade7b113de1699ce3280eccbd29fbe2b7d0dcca3d3ca270454ec855f41deaf71ee5e70cf595cae34216eb8a27ea470011b58ca47b9a1531ac7adca2a6de276c04d64b697ce6519174798527b6b5cf7b8d8cce98bb8f5220dc93d9aaa908af993424b171f58c18d668e0ba5688a9ef4e53dc0bd5dd6f729a4b8e86c5871f9d9ec37edf7b16f922bf526b01c15fab3b9b6aaa6769b65bbbd75f94dde05e6e658436c8da15bad9a27df106f31d609c3547786e122c26da2fbb1dabdc3632c08945c002f1b74ef270a8a7350f075f1c96a61a9ed76eb0c180b0349c2e590a164d9d7a741a916e81954d9437e368d2c233c7727df31e8c61387dcb0539233e4df9cebdb84048f152fc4e599f38e538f1b2acb08cc3055997921f850610135e44314621e57763d467dcb6eb41543e441eff181ac09640a6c0f451382c4d360b4ce737442dde5c8b3139610cafaaa65ce9e6eef2e09049744066906dc6cf9f71b2513bfd306fbe0a448788edbcfdb3e00cf0436339be11007f871d7d56b4bf68729af34535fbb19f7bc1008342bef361baebf887eb885702c4f896a38b0964386947a543d10403a78cdc89e7c60e88bc2819d0bf23c923ddedcace19e6b3cad5c025a9a33afc839c7d012341a1125809b0e654e7e42aba6e454b7c9a0470b37426f764e1d6c8c718b830e9d20e4cbc30a9253bda13b80ed96e005a6c62eb8f68b7034cd96d70cd5546d330ffc75f878c9e8360cdd64a01c291b233ee2eccd18cfd83decd957a55fbed4520574ec330c8c5d31c7cce034fc40369ec1685140d56ededd27d8ca2c9d3dd3aa58c056e17d33fd9f31129f3b217d860d00638bc41a2246d11bd6e01ce2adddd59b87c837cc96d95191cca0aaceaacc4dcd7b612f1c1db040f294a36a3a6cb52d92458e0dca9bf82acb8d1da775bb4ad7d8b5fe565d18916f0cec345053d64567d0028b2b02a07d4d5221279bf8309ada91db170b7816bb15e0560a5ceafe6c423bed44d4c64c51e8975af00c9f30f075ca1c8669967974fb9c3b75f31a381049de7abd5c06eafc2520f59407f12d49f908eaffeab1aa62d6c04b42962e87bdbf1615f704c2badfe7baaeb9997a784f1e0ecdc0d925805e44363bf9d98f4434a6978ed361bee13a39e6d95043b177c9d89cc8597cd4706635d80976f71c16940fe1409ede6df9ab55050609b3f2b1c4af5bab5389c65cd0e97ab6172e5050426ca6f3f1de53354d11dae80635b65cced625fc88fe1c0fab3b6fe943def04b763a02e2be46710c0f31edfcf9aed749b2c9b05719eec2980e6c6da872e65a89525ba1d35f6324fb87819e16f1cb945a3f4c433cfb824627b33d21591c073f41a829b661b7560c481af1497c371b64e3704318a6383b5cf0fb863bf7160a045c41f8a9f60cbc854538fc7954c1e6206ac27a818e1100e29a6551633136cf7fbef5e77569d38aac33476dc9fddd80750a339e5e8252a561c5147a1b6a77f2614a8a843820f2417433e6acc278e69fbde4fbfd46de990ba42d5889575266c1ce358666f981931c8667c424d71389638dfc1b3ad60ff9956add2d78ecdc13de075fe4d4acd1a4cb53ae92dcc7de5634586b74804e93c009ae2b733aea328d66f38aaed44a112f948a79417308501d401e26ea37a3542394b450ea3609b72896ecaaf40a8a07399621c037407f0ce39364e19652be2d977a866acda3577e33d379722fdbd30c74c71820794509c203eab20c8e76a41891d374bc890d86ede771871a110389a6b402d6551bc613599e8cc64e3319aea74c69d517b445e9ada514bc65d1927c0cba13a160e7b8728acc2eff199986c38d744ca1684928c3d35ac87fe14c6f8ca25719f2b2adacd40b76172251c055a1bf8a89bae92e83e8376c01d8cd2ed978033b9ff5a153797eeb5957ee182e8f51f86b45c6e93e846f1aaab7ea4bbc3250ce14bb4f4ac5e827a5768d56577ef3a16daac94cb1f3c918c0b7e6788c110b0e22f47eebe86559143a753fdebd624b9ca48d0405f0af1a7c7e473a56b336cc774232908e5fa6ef3d126a1b47b0594fb6dd91fff2f2aab1f6963b33e3a64d3d45af0cebafd47ba78b5eb3e930484854d75b0a90d7c45ce82e4da0f33528469158635e02e083ed76097f9bbebb3ae3c15aa294779be5c1886f863ff91518aad5ec0e0b70655c98525bda79396efcb115cf788f013b549d08118e920c6fa84350e77ae38094bb5a92a4faeebeacef256416c4deb309ee38e9a4eb167a7364496a4bad7b0fcff2e6a8d8a91d8c6c9a48b06889041e3a5bf2b6aab4bad915e300a4f8258318790e5607824c9a20c21eea1bb4a373758164c4e0529e97d7d8e1dcb61394ae1efd335eb542fe6075ca738a58eaa82d99ac4372bcac7afc447464245bcc2fc0146cc915862e06e2d43772ee0ddb70d89d6ebbd892cc51f1"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x388, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x34c}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x40c}}, 0x40000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000500)={0x1f, 0x1}, 0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 2.50331003s ago: executing program 3 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x800000000000000, 0x41}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) 2.442688523s ago: executing program 1 (id=2137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0xb0ff, 0xa2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.374471858s ago: executing program 3 (id=2141): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffefe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffefe}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x20001}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x20001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) socket(0x2b, 0x1, 0x1) (async) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x1d56ce4333ce878e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="603149508aa506843a7302bfaa000000000006e000000000e3d69be5"], 0x64}}, 0x400400c) 2.354397059s ago: executing program 1 (id=2142): r0 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x48844) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) sendmmsg$inet(r2, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca3808e8b8bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007", 0xe6}], 0x1}}], 0x1, 0x42054) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80004008}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x24000184) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="41f31a07472727233819222dc27bf762e63a31d09e51e299d5cdfcd1d30cefc7063f6938d6f1ec5d922797cda858e1abfada7c1fb8a88738bef654e09dff32524189dc3787244a7e0b7313f6fffc3233bd3670a1d5a2f1d105e4007a9e6f41d1fb7d8090d9d56aa5d0047f8395523fb653365d1a404cf7243469168fc769960dadb119570fac822b5593adfd002233cf1791270a7698ed249c55f37d7ba7f0080a3da62d566e66d4c0758998516557b7133e5b5058a09ad630a1c1beb0e72d346fe135092c21a3240732e7d73826", 0xce}], 0x1}}], 0x1, 0x20000040) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.128468269s ago: executing program 2 (id=2146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/126, 0x7e}, {&(0x7f0000003340)=""/155, 0x9b}, {&(0x7f0000003400)=""/144, 0x90}], 0x5}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000ccbe2082285bc52a7b3a618354a399edfbd5a638dee4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) 2.002372394s ago: executing program 2 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) close(0x3) 1.947614747s ago: executing program 3 (id=2149): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.774003966s ago: executing program 3 (id=2150): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='\x04', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2}) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a0001"], 0x30}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000010142d002b017000fddbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x20008045}, 0x48090) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000640)={r2, r2}) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xa92) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x62, &(0x7f0000000940)={@local, @random="0000080e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x2c, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[@dstopts={0x3c, 0x1, '\x00', [@generic={0x8, 0xd, "485d81364d90d37d7b070ab465"}]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r5, 0x4}, 0xc) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e24, 0x21e3, @empty, 0x8}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ppoll(&(0x7f0000000240)=[{r6, 0x8407}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0) 1.685895997s ago: executing program 2 (id=2152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @rand_addr=0x64010102, @link_local, @multicast2}}}}, &(0x7f0000000440)={0x1, 0x1, [0xa10, 0xec5, 0x231, 0x965]}) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x6a, 0x4, 0x1, 0x27) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x7805, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x58}, 0x1, 0x0, 0x0, 0x60008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.456372387s ago: executing program 2 (id=2157): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff7f000000000000f8edffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001868000007000000000000000500000058170000ffffffff185500000f00000000000000000000001830010002000000000000000000000018160000", @ANYRES32=0x1, @ANYBLOB="0000000000000000954220001000000018140000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x68, &(0x7f0000000200)=""/104, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x9, 0x7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x1925}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x6e, 0x3f, &(0x7f0000000400)="981f54d7c7b0257eef5754d46eebd25b7cf779ad33b4d50576ae6b80268cc6d0e4534c3e5053f840c8c09348b648b2eb4494fb1c59511a832fdd07396249b8aaf7d44149ff132a2ba530afb3f24084dfdfbe238230ab51b06555a83d75adf7b0fd66329eae5dba2059ad732fbbf0", &(0x7f0000000480)=""/63, 0x0, 0x0, 0x36, 0x50, &(0x7f00000004c0)="8323c8ee41030f13a67f3f6070116031ebe300641962d4e0ab478908b0d683904a2adb5d69eaa4f77824124e45300d9fc52582e00c8f", &(0x7f0000000500)="95cef54044c571d1f20533f182b0209865a9791dceeeb6cab4da05326de656a73ba035c0ed78a6ef2a80bb4f80be99f854f1c6e46841f444acca4d1a648b27f9bd2a8c6f26e1cfa20cdbee28a6f7da3d", 0x4, 0x0, 0xc6}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000040000000400000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000003c88000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r4, 0x1f4d2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5d, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d29c1e6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44090}, 0x891) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x21}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000003080)={{0xffffffffffffffff, &(0x7f0000000740)='\x00', 0x0, &(0x7f0000000780)={@align=0x2, {0x3, 0x8, 0x1, 0x404}}, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=0xbfe}, 0x3, &(0x7f0000003000)=[{0x2, 0xff, &(0x7f0000000840)='-]&]#\x00', &(0x7f0000000880)="3372ff4d690ba529e3935eb1a6f9cc9fa2676ce834024a0987a2461fd3da60f3cfd465d93b9d4a664e2db6c2c9e4569b380d01b074d94c11f1fbfd438d81c5725f19b7295708093f31c1160f1ffd563d7c50072d7952d021985abee15aeedc679d3c3a668e71b3dd2e475868f3b8fdf7f51804ce600320dc249c1440449cefb09c842406221842235f7213ba71705c6a27cb25db7820ceca2faed69013ee82d041385550c5c98f0f3b5a365ed8e5d6367ed2c3c68102a552703c2a0ac8bc", 0xbe}, {0x1, 0x7, &(0x7f0000000940)='GPL\x00', &(0x7f0000003300)="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", 0x10fc, 0x12}, {0x2, 0x4, &(0x7f0000002f00)='\\\xbc\x00', &(0x7f0000002f40)="c44143813ea3caed19038a287630985d9e62883605eb27611a48764e816d4380a8f7eb911fa4470621fab49c7586839d3323bd7e2592a75f19286ca9ba6910f68d980f6884768aa426e3a1270e6822de0f6a260ca07d45d07d1e391630d54aa1897b94f34b2cbe4054a695d9d7c417c4ba1587eb6285369ad08215f3201fc194aaa05e5cd247acd64ded2a104e88d7f6d4a27b9bcccbf74fc5e757bd", 0x9c, 0xa}]}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000003100), &(0x7f0000003140)='%pB \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003240)=@bpf_ext={0x1c, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x7, 0xa, 0x4, 0x8, 0x8000}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x4}, 0x10, 0x6ce2, r10, 0x1, &(0x7f00000031c0)=[r2, r12, r2, r2, r2], &(0x7f0000003200)=[{0x1, 0x2, 0x2, 0x9}]}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.408677893s ago: executing program 1 (id=2158): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/126, 0x7e}, {&(0x7f0000003340)=""/155, 0x9b}, {&(0x7f0000003400)=""/144, 0x90}], 0x5}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000ccbe2082285bc52a7b3a618354a399edfbd5a638dee4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) 1.358142036s ago: executing program 4 (id=2159): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xca}, @common=@unspec=@RATEEST={0x22, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x1a) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf25030000001800018014000000050003000f000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x4, 0xf59, {{0x6, 0x4, 0x0, 0x1a, 0x18, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @empty, {[@end, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@local, @broadcast}, &(0x7f00000001c0)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x7, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0x2, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fcdbdf25020000001400018008000100", @ANYRES32=r5, @ANYBLOB="5586e178e48c08b100000000000000", @ANYRES32=r6, @ANYBLOB="0c0001807c00018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="140002006272696467655f736c6176655f3100001400020069703665727370616e3000000000000051ff030001000000140002006d616376746170300000000000000000080003000200000014000200697036746e6c30000000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xd, 0x3, 0x6}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @generic={0x3, 0x3, 'Q'}]}}}}}}}, 0x0) 1.357318465s ago: executing program 3 (id=2160): socket(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x200, 0x2000004, 0x54}}}}}}}, 0x4a) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r4) socket(0x10, 0x3, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0xc8, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x200, 0x2000004, 0x54}}}}}}}, 0x4a) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) close(r4) (async) 1.294472108s ago: executing program 0 (id=2161): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRESDEC=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x57, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_NET_NS_FD={0x0, 0x1c, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044852) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000400)={0x3, 'bond0\x00', {0x7}, 0x6}) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x1, 0x0, &(0x7f0000000340)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r11 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='^@+(\x00', 0x101000, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x78ee73ec]}, {0x0, 0x7, 0x2, 0xffffffffffffff39}}, 0xb6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfffffff7}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) write$cgroup_pressure(r12, &(0x7f0000000280)={'some', 0x20, 0x0, 0x20, 0x5}, 0x2f) 1.219229336s ago: executing program 4 (id=2162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x420c0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf9205000000000000001eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c00e106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72cd67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae04753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14c17564b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c35ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487429a8da93c5e2a14f727"}}, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) syz_emit_ethernet(0x1011, &(0x7f0000002380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@x25={0x805, {0x0, 0x5, 0xf, "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"}}}}, &(0x7f00000033c0)={0x1, 0x1, [0x8db, 0x3ad, 0x8f, 0xb89]}) (async) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9, r8}, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.168172195s ago: executing program 1 (id=2163): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002000010000080000000000000a000010000000000075cb00050019"], 0x24}}, 0x48850) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x1000) socket(0x6, 0x80000, 0xfffffff8) r1 = socket$kcm(0x2c, 0x3, 0x0) unshare(0x20000400) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x8) poll(&(0x7f0000000180)=[{r2, 0x2}], 0x1, 0x7f) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) shutdown(r5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f0000000080)='\xeb\xf5\xd7\xc5YBTwu\xfcp\xe5iO5g\x00', 0x80, &(0x7f00000000c0)={@align=0x835, {0x5, 0x2, 0x2, 0x5}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x1}, {[0x2, 0xe, 0x400, 0x6]}, 0x5, 0x9e, &(0x7f0000000180)=""/158}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r9, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5a2, 0x6d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x81) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) 1.003341168s ago: executing program 2 (id=2164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x810) 902.105301ms ago: executing program 4 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) recvfrom$phonet(r3, 0x0, 0x0, 0x12020, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 877.85984ms ago: executing program 2 (id=2166): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x9, 0x30}, &(0x7f0000000540)=0xc) 759.611627ms ago: executing program 3 (id=2167): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8, 0x3}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x8, 0x1}, &(0x7f00000001c0)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 648.491141ms ago: executing program 4 (id=2168): r0 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x48844) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) sendmmsg$inet(r2, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca3808e8b8bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007", 0xe6}], 0x1}}], 0x1, 0x42054) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80004008}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x24000184) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="41f31a07472727233819222dc27bf762e63a31d09e51e299d5cdfcd1d30cefc7063f6938d6f1ec5d922797cda858e1abfada7c1fb8a88738bef654e09dff32524189dc3787244a7e0b7313f6fffc3233bd3670a1d5a2f1d105e4007a9e6f41d1fb7d8090d9d56aa5d0047f8395523fb653365d1a404cf7243469168fc769960dadb119570fac822b5593adfd002233cf1791270a7698ed249c55f37d7ba7f0080a3da62d566e66d4c0758998516557b7133e5b5058a09ad630a1c1beb0e72d346fe135092c21a3240732e7d73826", 0xce}], 0x1}}], 0x1, 0x20000040) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 597.051111ms ago: executing program 0 (id=2169): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000009000000000001180000000000000084000000070000000a"], 0x38}], 0x1, 0x0) 521.595564ms ago: executing program 4 (id=2170): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='\x04', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2}) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a0001"], 0x30}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000010142d002b017000fddbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x20008045}, 0x48090) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000640)={r2, r2}) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xa92) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x62, &(0x7f0000000940)={@local, @random="0000080e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x2c, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[@dstopts={0x3c, 0x1, '\x00', [@generic={0x8, 0xd, "485d81364d90d37d7b070ab465"}]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r5, 0x4}, 0xc) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e24, 0x21e3, @empty, 0x8}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ppoll(&(0x7f0000000240)=[{r6, 0x8407}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0) 418.58415ms ago: executing program 0 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x51, 0x2}}], 0x18}}], 0x1, 0x20000000) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0x0, 0x7, 0x3}, &(0x7f0000000080)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x4040080) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, 0x0, 0x0) getsockname$packet(r10, 0x0, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r11, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x7c) socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 315.137627ms ago: executing program 0 (id=2172): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x12, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000d61011460500eb0149dc36a002206010100000000000000000000000005000400000000000900020073796a300000000016000300686173683a7400000005000100070000000500050007008000169ff6610d794bf5c67515bc12894440d26b4a7ca40948ab55b8361873a49628da"], 0x50}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {0xff}, 0x11, 0x3b, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x800000, 0x2, 0x0, 0xf}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 170.131897ms ago: executing program 0 (id=2173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/126, 0x7e}, {&(0x7f0000003340)=""/155, 0x9b}, {&(0x7f0000003400)=""/144, 0x90}], 0x5}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000ccbe2082285bc52a7b3a618354a399edfbd5a638dee4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) 6.792368ms ago: executing program 4 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002b40)=""/4081, 0xff1}], 0x1}, 0x10002) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1}, 0x10) bind$xdp(r2, &(0x7f0000000740)={0x2c, 0x10, 0x0, 0x38}, 0x10) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001400)=""/75, 0x4b}], 0x2}, 0x35}], 0x2, 0x2, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 5.815591ms ago: executing program 0 (id=2175): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000100)={0x7ff, 0xffffffff, 0x8, 0x3, 0x5}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a5343", 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r6, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x10000) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}}, 0x0) 0s ago: executing program 1 (id=2176): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xb, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04", 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) kernel console output (not intermixed with test programs): rsing attributes in process `syz.2.612'. [ 159.410818][ T8107] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 159.525365][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.613'. [ 159.610855][ T8107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.637373][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.613'. [ 159.713432][ T8112] bond6: (slave veth5): Enslaving as an active interface with a down link [ 159.752787][ T8115] bond6: entered allmulticast mode [ 159.776672][ T8118] bond6: left allmulticast mode [ 159.779352][ T8131] FAULT_INJECTION: forcing a failure. [ 159.779352][ T8131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.786631][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 159.809303][ T8118] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.830858][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.0.619 Not tainted syzkaller #0 PREEMPT(full) [ 159.830881][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.830890][ T8131] Call Trace: [ 159.830896][ T8131] [ 159.830903][ T8131] dump_stack_lvl+0xe8/0x150 [ 159.830928][ T8131] should_fail_ex+0x40c/0x560 [ 159.830956][ T8131] _copy_from_user+0x2d/0xb0 [ 159.830976][ T8131] ____sys_sendmsg+0x33d/0xa20 [ 159.831003][ T8131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.831037][ T8131] ? import_iovec+0x73/0xa0 [ 159.831057][ T8131] ___sys_sendmsg+0x2a5/0x360 [ 159.831073][ T8131] ? __lock_acquire+0x683/0x2cd0 [ 159.831092][ T8131] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.831119][ T8131] ? __fget_files+0x2a/0x420 [ 159.831131][ T8131] ? __fget_files+0x3a2/0x420 [ 159.831147][ T8131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 159.831159][ T8131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.831173][ T8131] ? __pfx_ksys_write+0x10/0x10 [ 159.831191][ T8131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.831202][ T8131] do_syscall_64+0x174/0x580 [ 159.831216][ T8131] ? trace_irq_disable+0x3b/0x140 [ 159.831237][ T8131] ? clear_bhb_loop+0x40/0x90 [ 159.831257][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.831273][ T8131] RIP: 0033:0x7fe7d639ce59 [ 159.831290][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.831303][ T8131] RSP: 002b:00007fe7d7336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.831321][ T8131] RAX: ffffffffffffffda RBX: 00007fe7d6615fa0 RCX: 00007fe7d639ce59 [ 159.831333][ T8131] RDX: 0000000024048894 RSI: 00002000000005c0 RDI: 0000000000000005 [ 159.831344][ T8131] RBP: 00007fe7d7336090 R08: 0000000000000000 R09: 0000000000000000 [ 159.831354][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.831362][ T8131] R13: 00007fe7d6616038 R14: 00007fe7d6615fa0 R15: 00007fff97eb6a98 [ 159.831378][ T8131] [ 160.225868][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 160.329199][ T8141] smc: net device hsr0 applied user defined pnetid SYZ2 [ 160.490857][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 160.503664][ T8152] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 160.553435][ T8152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.600349][ T8149] atomic_op ffff888033435998 conn xmit_atomic 0000000000000000 [ 160.632786][ T8160] bond4: (slave geneve4): making interface the new active one [ 160.642841][ T8160] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 160.720798][ T8164] FAULT_INJECTION: forcing a failure. [ 160.720798][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.767843][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.4.631 Not tainted syzkaller #0 PREEMPT(full) [ 160.767867][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.767876][ T8164] Call Trace: [ 160.767894][ T8164] [ 160.767901][ T8164] dump_stack_lvl+0xe8/0x150 [ 160.767927][ T8164] should_fail_ex+0x40c/0x560 [ 160.767959][ T8164] _copy_from_iter+0x3b0/0x1660 [ 160.767988][ T8164] ? __pfx__copy_from_iter+0x10/0x10 [ 160.768020][ T8164] ping_v4_sendmsg+0x289/0x1870 [ 160.768057][ T8164] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 160.768115][ T8164] ? inet_sendmsg+0x10d/0x320 [ 160.768138][ T8164] ? __local_bh_enable_ip+0xd0/0x130 [ 160.768157][ T8164] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.768177][ T8164] ? inet_sendmsg+0x10d/0x320 [ 160.768197][ T8164] ? __local_bh_enable_ip+0xd0/0x130 [ 160.768214][ T8164] ? inet_sendmsg+0x298/0x320 [ 160.768237][ T8164] ? __pfx_inet_sendmsg+0x10/0x10 [ 160.768262][ T8164] ____sys_sendmsg+0x853/0xa20 [ 160.768289][ T8164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.768316][ T8164] ? import_iovec+0x73/0xa0 [ 160.768339][ T8164] ___sys_sendmsg+0x2a5/0x360 [ 160.768356][ T8164] ? __lock_acquire+0x683/0x2cd0 [ 160.768378][ T8164] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.768430][ T8164] ? __fget_files+0x2a/0x420 [ 160.768453][ T8164] ? __fget_files+0x3a2/0x420 [ 160.768483][ T8164] __x64_sys_sendmsg+0x1bd/0x2a0 [ 160.768504][ T8164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.768533][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 160.768564][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.768583][ T8164] do_syscall_64+0x174/0x580 [ 160.768601][ T8164] ? trace_irq_disable+0x3b/0x140 [ 160.768625][ T8164] ? clear_bhb_loop+0x40/0x90 [ 160.768647][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.768664][ T8164] RIP: 0033:0x7f82ff19ce59 [ 160.768681][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.768694][ T8164] RSP: 002b:00007f8300060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.768713][ T8164] RAX: ffffffffffffffda RBX: 00007f82ff415fa0 RCX: 00007f82ff19ce59 [ 160.768725][ T8164] RDX: 0000000024048894 RSI: 00002000000005c0 RDI: 0000000000000005 [ 160.768737][ T8164] RBP: 00007f8300060090 R08: 0000000000000000 R09: 0000000000000000 [ 160.768747][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.768757][ T8164] R13: 00007f82ff416038 R14: 00007f82ff415fa0 R15: 00007ffe5148f498 [ 160.768783][ T8164] [ 161.147268][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 161.280408][ T8173] netlink: 'syz.4.636': attribute type 13 has an invalid length. [ 161.476771][ T8183] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 161.488366][ T8183] netlink: 'syz.1.640': attribute type 6 has an invalid length. [ 161.496401][ T8183] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 162.522432][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'. [ 162.579655][ T8239] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 162.611555][ T8244] netlink: 'syz.4.661': attribute type 1 has an invalid length. [ 162.727808][ T8239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.769940][ T8244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.786294][ T8257] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 162.808766][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.661'. [ 162.821970][ T8242] bond3: (slave geneve2): making interface the new active one [ 162.857806][ T8242] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 162.920516][ T8249] bond5: (slave veth3): Enslaving as an active interface with a down link [ 162.994878][ T8253] bond5: (slave dummy0): making interface the new active one [ 163.015173][ T8253] dummy0: entered promiscuous mode [ 163.025536][ T8253] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 163.054291][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.069666][ T8257] bond5: (slave dummy0): Releasing active interface [ 163.087346][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.101503][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.124853][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.281431][ T8275] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.670'. [ 163.305496][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.320326][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 163.330530][ T8276] netlink: 240 bytes leftover after parsing attributes in process `syz.2.668'. [ 163.488239][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 163.492298][ T8284] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 163.497551][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 163.575904][ T8287] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.633017][ T8287] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.678580][ T8287] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.730903][ T8287] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.854295][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.897124][ T8294] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 163.913753][ T1116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.956229][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.038429][ T1116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.052520][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 164.635219][ T8332] validate_nla: 1 callbacks suppressed [ 164.635237][ T8332] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 164.681081][ T8332] bond7: entered promiscuous mode [ 164.686827][ T8332] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.188133][ T8305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.508468][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'. [ 167.684142][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'. [ 167.739750][ T8387] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 167.810790][ T8387] 8021q: adding VLAN 0 to HW filter on device bond8 [ 167.946167][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.131381][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 168.534297][ T8436] netlink: 56 bytes leftover after parsing attributes in process `syz.0.717'. [ 169.095132][ T8460] gretap0: entered promiscuous mode [ 169.101012][ T8460] vlan3: entered promiscuous mode [ 169.182031][ T8466] batman_adv: batadv0: Adding interface: dummy0 [ 169.199621][ T8466] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.229997][ T8466] batman_adv: batadv0: Interface activated: dummy0 [ 169.438701][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.1.727'. [ 169.441428][ T8475] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 169.457330][ T8474] vlan2: entered promiscuous mode [ 169.464734][ T8474] geneve1: entered promiscuous mode [ 169.470495][ T8474] vlan2: entered allmulticast mode [ 169.475855][ T8474] geneve1: entered allmulticast mode [ 169.498802][ T8475] netlink: 96 bytes leftover after parsing attributes in process `syz.4.726'. [ 169.524740][ T8475] netlink: 1 bytes leftover after parsing attributes in process `syz.4.726'. [ 169.545560][ T8475] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 169.559198][ T8478] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 169.566281][ T8475] netlink: 'syz.4.726': attribute type 8 has an invalid length. [ 169.576855][ T8478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.582394][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 169.617761][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 169.619559][ T8475] netlink: 606 bytes leftover after parsing attributes in process `syz.4.726'. [ 170.052771][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 170.364638][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 170.634395][ T8513] vlan3: entered allmulticast mode [ 170.667910][ T8513] bond0: entered allmulticast mode [ 170.685310][ T8513] bond_slave_0: entered allmulticast mode [ 170.709683][ T8513] bond_slave_1: entered allmulticast mode [ 170.893090][ T8523] syzkaller0: entered promiscuous mode [ 170.900988][ T8523] syzkaller0: entered allmulticast mode [ 170.959507][ T8528] FAULT_INJECTION: forcing a failure. [ 170.959507][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.973270][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.1.743 Not tainted syzkaller #0 PREEMPT(full) [ 170.973294][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.973303][ T8528] Call Trace: [ 170.973311][ T8528] [ 170.973318][ T8528] dump_stack_lvl+0xe8/0x150 [ 170.973344][ T8528] should_fail_ex+0x40c/0x560 [ 170.973374][ T8528] _copy_from_user+0x2d/0xb0 [ 170.973394][ T8528] do_sock_getsockopt+0x200/0x7e0 [ 170.973417][ T8528] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 170.973449][ T8528] ? __fget_files+0x3a2/0x420 [ 170.973468][ T8528] ? __fget_files+0x2a/0x420 [ 170.973501][ T8528] __x64_sys_getsockopt+0x1a4/0x240 [ 170.973524][ T8528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.973542][ T8528] do_syscall_64+0x174/0x580 [ 170.973582][ T8528] ? trace_irq_disable+0x3b/0x140 [ 170.973606][ T8528] ? clear_bhb_loop+0x40/0x90 [ 170.973627][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.973644][ T8528] RIP: 0033:0x7f07cdf9ce59 [ 170.973661][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.973674][ T8528] RSP: 002b:00007f07cee4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 170.973693][ T8528] RAX: ffffffffffffffda RBX: 00007f07ce215fa0 RCX: 00007f07cdf9ce59 [ 170.973705][ T8528] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 170.973716][ T8528] RBP: 00007f07cee4d090 R08: 0000200000000400 R09: 0000000000000000 [ 170.973727][ T8528] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 170.973738][ T8528] R13: 00007f07ce216038 R14: 00007f07ce215fa0 R15: 00007ffd7836dea8 [ 170.973766][ T8528] [ 172.003487][ T8560] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 172.054526][ T8560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.104249][ T8563] SET target dimension over the limit! [ 172.118110][ T8560] bond2: (slave geneve2): making interface the new active one [ 172.142983][ T8560] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 172.450088][ T8575] syzkaller0: entered promiscuous mode [ 172.487874][ T8575] syzkaller0: entered allmulticast mode [ 172.497254][ T8578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.736548][ T8589] __nla_validate_parse: 5 callbacks suppressed [ 172.736565][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.764'. [ 172.881119][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 172.937420][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 172.947440][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 173.184188][ T8611] netlink: 'syz.3.768': attribute type 89 has an invalid length. [ 173.194727][ T8611] netlink: 'syz.3.768': attribute type 266 has an invalid length. [ 173.237486][ T8612] xt_hashlimit: size too large, truncated to 1048576 [ 173.638670][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 174.090600][ T8633] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 174.101706][ T8633] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 174.149730][ T1107] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.165826][ T1107] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.183821][ T1107] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.202080][ T1107] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.245985][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.777'. [ 174.388738][ T8637] netlink: 'syz.0.778': attribute type 13 has an invalid length. [ 174.408052][ T8637] gretap0: refused to change device tx_queue_len [ 174.416224][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.438021][ T8637] netlink: 'syz.0.778': attribute type 13 has an invalid length. [ 174.450385][ T8637] gretap0: refused to change device tx_queue_len [ 174.456895][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.472851][ T8637] netlink: 'syz.0.778': attribute type 13 has an invalid length. [ 174.481269][ T8637] gretap0: refused to change device tx_queue_len [ 174.487900][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.504751][ T8637] netlink: 'syz.0.778': attribute type 13 has an invalid length. [ 174.513430][ T8637] gretap0: refused to change device tx_queue_len [ 174.519997][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.536033][ T8637] netlink: 'syz.0.778': attribute type 13 has an invalid length. [ 174.544176][ T8637] gretap0: refused to change device tx_queue_len [ 174.550759][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.568171][ T8637] gretap0: refused to change device tx_queue_len [ 174.574609][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.591010][ T8637] gretap0: refused to change device tx_queue_len [ 174.597480][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.613820][ T8637] gretap0: refused to change device tx_queue_len [ 174.620330][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.636456][ T8637] gretap0: refused to change device tx_queue_len [ 174.642986][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.659250][ T8637] gretap0: refused to change device tx_queue_len [ 174.665688][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.682819][ T8637] gretap0: refused to change device tx_queue_len [ 174.689339][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.705900][ T8637] gretap0: refused to change device tx_queue_len [ 174.712433][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.728705][ T8637] gretap0: refused to change device tx_queue_len [ 174.735150][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.751655][ T8637] gretap0: refused to change device tx_queue_len [ 174.758124][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.774322][ T8637] gretap0: refused to change device tx_queue_len [ 174.780796][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.797321][ T8637] gretap0: refused to change device tx_queue_len [ 174.803865][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.820437][ T8637] gretap0: refused to change device tx_queue_len [ 174.827246][ T8637] gretap0: refused to change device tx_queue_len [ 174.834152][ T8637] gretap0: refused to change device tx_queue_len [ 174.841044][ T8637] gretap0: refused to change device tx_queue_len [ 174.848070][ T8637] gretap0: refused to change device tx_queue_len [ 174.854873][ T8637] gretap0: refused to change device tx_queue_len [ 174.861896][ T8637] gretap0: refused to change device tx_queue_len [ 174.868910][ T8637] gretap0: refused to change device tx_queue_len [ 174.875796][ T8637] gretap0: refused to change device tx_queue_len [ 174.882710][ T8637] gretap0: refused to change device tx_queue_len [ 174.889689][ T8637] gretap0: refused to change device tx_queue_len [ 174.896491][ T8637] gretap0: refused to change device tx_queue_len [ 174.903697][ T8637] gretap0: refused to change device tx_queue_len [ 174.910640][ T8637] gretap0: refused to change device tx_queue_len [ 174.917518][ T8637] gretap0: refused to change device tx_queue_len [ 174.924369][ T8637] gretap0: refused to change device tx_queue_len [ 174.931459][ T8637] gretap0: refused to change device tx_queue_len [ 175.488941][ T8653] netlink: 192 bytes leftover after parsing attributes in process `syz.1.782'. [ 175.657230][ T8584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.872393][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 175.884110][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 175.894448][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.784'. [ 176.155184][ T8686] syzkaller0: entered promiscuous mode [ 176.170123][ T8686] syzkaller0: entered allmulticast mode [ 176.847196][ T8709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.030802][ T8730] validate_nla: 29 callbacks suppressed [ 177.030820][ T8730] netlink: 'syz.4.804': attribute type 10 has an invalid length. [ 177.062879][ T8730] geneve1: entered promiscuous mode [ 177.101770][ T8730] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 177.210061][ T8739] syzkaller0: entered promiscuous mode [ 177.216174][ T8739] syzkaller0: entered allmulticast mode [ 177.287348][ T8741] netlink: 'syz.3.811': attribute type 24 has an invalid length. [ 177.560829][ T8754] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 177.594233][ T8754] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.838620][ T8762] x_tables: duplicate underflow at hook 2 [ 178.034446][ T8771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.120574][ T8771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.212449][ T8771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.250102][ T8771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.345565][ T1116] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.426694][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.466252][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.570129][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.600693][ T8786] netlink: 'syz.2.826': attribute type 9 has an invalid length. [ 178.608506][ T8786] __nla_validate_parse: 12 callbacks suppressed [ 178.608523][ T8786] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.826'. [ 178.626286][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 179.213836][ T8812] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 179.216715][ T8811] bridge0: port 1(syz_tun) entered blocking state [ 179.240058][ T8811] bridge0: port 1(syz_tun) entered disabled state [ 179.248285][ T8811] syz_tun: entered allmulticast mode [ 179.324904][ T8814] FAULT_INJECTION: forcing a failure. [ 179.324904][ T8814] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 179.342086][ T8811] syz_tun: left allmulticast mode [ 179.362501][ T8814] CPU: 0 UID: 0 PID: 8814 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT(full) [ 179.362526][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.362536][ T8814] Call Trace: [ 179.362543][ T8814] [ 179.362550][ T8814] dump_stack_lvl+0xe8/0x150 [ 179.362576][ T8814] should_fail_ex+0x40c/0x560 [ 179.362608][ T8814] prepare_alloc_pages+0x230/0x650 [ 179.362639][ T8814] __alloc_frozen_pages_noprof+0x12f/0x380 [ 179.362667][ T8814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.362694][ T8814] ? __pfx_policy_nodemask+0x10/0x10 [ 179.362720][ T8814] ? __lock_acquire+0x683/0x2cd0 [ 179.362740][ T8814] alloc_pages_mpol+0x212/0x380 [ 179.362770][ T8814] folio_alloc_mpol_noprof+0x39/0x160 [ 179.362797][ T8814] vma_alloc_folio_noprof+0xe1/0x1e0 [ 179.362817][ T8814] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 179.362834][ T8814] ? __pte_offset_map+0x29/0x240 [ 179.362854][ T8814] ? __pte_offset_map+0x29/0x240 [ 179.362877][ T8814] do_pte_missing+0x1750/0x3540 [ 179.362914][ T8814] handle_mm_fault+0x1b38/0x3080 [ 179.362947][ T8814] ? handle_mm_fault+0xec/0x3080 [ 179.362975][ T8814] ? __pfx_handle_mm_fault+0x10/0x10 [ 179.362995][ T8814] ? follow_page_pte+0x6ce/0xe70 [ 179.363022][ T8814] ? __pfx_follow_page_pte+0x10/0x10 [ 179.363064][ T8814] __get_user_pages+0x1678/0x2720 [ 179.363111][ T8814] __gup_longterm_locked+0xd52/0x15c0 [ 179.363134][ T8814] ? lock_acquire+0x106/0x350 [ 179.363157][ T8814] ? sanity_check_pinned_pages+0x810/0x8d0 [ 179.363189][ T8814] gup_fast_fallback+0x1d82/0x20d0 [ 179.363238][ T8814] ? __pfx_gup_fast_fallback+0x10/0x10 [ 179.363259][ T8814] ? rcu_is_watching+0x15/0xb0 [ 179.363284][ T8814] ? pin_user_pages_fast+0x4d/0xb0 [ 179.363305][ T8814] iov_iter_extract_pages+0x369/0x5f0 [ 179.363333][ T8814] rds_info_getsockopt+0x27d/0x620 [ 179.363358][ T8814] ? kstrtouint+0x6e/0xe0 [ 179.363385][ T8814] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 179.363421][ T8814] ? __might_fault+0xaf/0x130 [ 179.363443][ T8814] ? __might_fault+0xaf/0x130 [ 179.363467][ T8814] rds_getsockopt+0x38b/0x600 [ 179.363491][ T8814] ? __pfx_rds_getsockopt+0x10/0x10 [ 179.363520][ T8814] do_sock_getsockopt+0x6ae/0x7e0 [ 179.363545][ T8814] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 179.363580][ T8814] ? __fget_files+0x3a2/0x420 [ 179.363600][ T8814] ? __fget_files+0x2a/0x420 [ 179.363628][ T8814] __x64_sys_getsockopt+0x1a4/0x240 [ 179.363652][ T8814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.363672][ T8814] do_syscall_64+0x174/0x580 [ 179.363690][ T8814] ? trace_irq_disable+0x3b/0x140 [ 179.363725][ T8814] ? clear_bhb_loop+0x40/0x90 [ 179.363749][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.363766][ T8814] RIP: 0033:0x7f634e79ce59 [ 179.363782][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.363796][ T8814] RSP: 002b:00007f634f6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 179.363814][ T8814] RAX: ffffffffffffffda RBX: 00007f634ea15fa0 RCX: 00007f634e79ce59 [ 179.363825][ T8814] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 179.363835][ T8814] RBP: 00007f634f6b1090 R08: 0000200000000400 R09: 0000000000000000 [ 179.363846][ T8814] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 179.363856][ T8814] R13: 00007f634ea16038 R14: 00007f634ea15fa0 R15: 00007ffcf90ff9f8 [ 179.363883][ T8814] [ 179.456047][ T8811] IPVS: Unknown mcast interface: vcan0 [ 179.809434][ T8820] syzkaller0: entered promiscuous mode [ 179.821347][ T8820] syzkaller0: entered allmulticast mode [ 179.846553][ T8820] FAULT_INJECTION: forcing a failure. [ 179.846553][ T8820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.864553][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.3.838 Not tainted syzkaller #0 PREEMPT(full) [ 179.864577][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.864587][ T8820] Call Trace: [ 179.864594][ T8820] [ 179.864601][ T8820] dump_stack_lvl+0xe8/0x150 [ 179.864628][ T8820] should_fail_ex+0x40c/0x560 [ 179.864660][ T8820] _copy_to_user+0x31/0xb0 [ 179.864680][ T8820] simple_read_from_buffer+0xe1/0x170 [ 179.864711][ T8820] proc_fail_nth_read+0x1bb/0x230 [ 179.864734][ T8820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.864758][ T8820] ? rw_verify_area+0x24a/0x4c0 [ 179.864781][ T8820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.864802][ T8820] vfs_read+0x213/0xa80 [ 179.864831][ T8820] ? __pfx___mutex_lock+0x10/0x10 [ 179.864852][ T8820] ? __pfx_vfs_read+0x10/0x10 [ 179.864877][ T8820] ? __fget_files+0x2a/0x420 [ 179.864901][ T8820] ? __fget_files+0x3a2/0x420 [ 179.864920][ T8820] ? __fget_files+0x2a/0x420 [ 179.864948][ T8820] ksys_read+0x150/0x270 [ 179.864973][ T8820] ? __pfx_ksys_read+0x10/0x10 [ 179.865003][ T8820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.865022][ T8820] do_syscall_64+0x174/0x580 [ 179.865039][ T8820] ? trace_irq_disable+0x3b/0x140 [ 179.865070][ T8820] ? clear_bhb_loop+0x40/0x90 [ 179.865091][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.865107][ T8820] RIP: 0033:0x7f634e75d68e [ 179.865123][ T8820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.865135][ T8820] RSP: 002b:00007f634f6b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.865151][ T8820] RAX: ffffffffffffffda RBX: 00007f634f6b16c0 RCX: 00007f634e75d68e [ 179.865163][ T8820] RDX: 000000000000000f RSI: 00007f634f6b10a0 RDI: 0000000000000007 [ 179.865173][ T8820] RBP: 00007f634f6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 179.865182][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.865191][ T8820] R13: 00007f634ea16038 R14: 00007f634ea15fa0 R15: 00007ffcf90ff9f8 [ 179.865218][ T8820] [ 180.142236][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 180.170203][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'. [ 180.291853][ T8837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.844'. [ 180.324359][ T8840] xt_cgroup: invalid path, errno=-2 [ 180.647009][ T8850] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 180.866491][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 180.876115][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 180.988666][ T8865] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 181.109885][ T8859] netlink: 'syz.3.851': attribute type 14 has an invalid length. [ 181.406565][ T8879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.855'. [ 181.565232][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 181.653179][ T8888] netlink: 88 bytes leftover after parsing attributes in process `syz.2.859'. [ 181.678311][ T8888] nbd: must specify a size in bytes for the device [ 181.711699][ T8889] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 181.852906][ T8889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.117545][ T8913] netlink: 'syz.2.866': attribute type 14 has an invalid length. [ 182.207343][ T8916] bond8: option lacp_rate: invalid value (128) [ 182.223653][ T8916] bond8 (unregistering): Released all slaves [ 182.366080][ T8921] veth3: entered promiscuous mode [ 183.127188][ T8952] netlink: 'syz.2.874': attribute type 30 has an invalid length. [ 183.375196][ T8965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.519329][ T8970] netlink: 'syz.4.878': attribute type 14 has an invalid length. [ 183.615222][ T8974] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.116414][ T8995] __nla_validate_parse: 10 callbacks suppressed [ 184.116433][ T8995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.887'. [ 184.175320][ T8995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.887'. [ 184.289709][ T8980] netlink: 'syz.1.882': attribute type 4 has an invalid length. [ 184.370812][ T9001] syzkaller0: entered promiscuous mode [ 184.388274][ T9001] syzkaller0: entered allmulticast mode [ 184.433688][ T9007] netlink: 'syz.3.890': attribute type 83 has an invalid length. [ 184.591975][ T9012] netlink: 88 bytes leftover after parsing attributes in process `syz.3.892'. [ 184.613023][ T9012] nbd: must specify a size in bytes for the device [ 185.058698][ T9030] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 187.745745][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 187.941019][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 188.018341][ T9081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'. [ 188.065079][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'. [ 188.109788][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 188.127540][ T9086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 188.612048][ T5637] Bluetooth: hci4: link tx timeout [ 188.618440][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.711926][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'. [ 190.114453][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 190.160341][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 190.191871][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 190.320060][ T9184] syzkaller0: entered promiscuous mode [ 190.331740][ T9184] syzkaller0: entered allmulticast mode [ 190.662769][ T9132] Bluetooth: hci4: command 0x0405 tx timeout [ 190.741372][ T9217] vxcan2: entered allmulticast mode [ 190.793822][ T9212] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.855370][ T9217] x_tables: duplicate underflow at hook 1 [ 190.933924][ T9212] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.089851][ T9212] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.112372][ T9234] tipc: Enabled bearer , priority 0 [ 191.120518][ T9234] syzkaller0: entered promiscuous mode [ 191.126190][ T9234] syzkaller0: entered allmulticast mode [ 191.146901][ T9234] tipc: Resetting bearer [ 191.149773][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 191.159537][ T9132] Bluetooth: hci1: command 0x0406 tx timeout [ 191.165614][ T9131] Bluetooth: hci3: command 0x0406 tx timeout [ 191.166313][ T9130] Bluetooth: hci2: command 0x0406 tx timeout [ 191.212681][ T9234] netlink: 112 bytes leftover after parsing attributes in process `syz.4.955'. [ 191.230544][ T9212] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.274229][ T9233] tipc: Resetting bearer [ 191.307428][ T9233] tipc: Disabling bearer [ 191.486354][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.580292][ T9260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.655982][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.711610][ T1116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.753420][ T1116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.780878][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 191.891621][ T9273] netlink: 'syz.4.963': attribute type 28 has an invalid length. [ 191.895553][ T9265] netlink: 'syz.1.962': attribute type 14 has an invalid length. [ 192.239844][ T9290] net_ratelimit: 20 callbacks suppressed [ 192.239864][ T9290] openvswitch: netlink: IP tunnel dst address not specified [ 192.273413][ T9290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.403009][ T9289] syzkaller1: entered promiscuous mode [ 192.417776][ T9289] syzkaller1: entered allmulticast mode [ 192.784557][ T9325] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 192.809536][ T9327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.898306][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 192.917529][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.980'. [ 192.944922][ T9332] geneve3: entered promiscuous mode [ 192.958266][ T9332] geneve3: entered allmulticast mode [ 193.156904][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 193.224598][ T9341] netlink: 'syz.4.981': attribute type 14 has an invalid length. [ 193.391815][ T9353] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.450818][ T9360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.985'. [ 193.585984][ T9360] block nbd1: must specify backend [ 193.611189][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.694760][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.992'. [ 193.730404][ T9376] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 193.803686][ T9374] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 193.922128][ T9386] netlink: 'syz.3.999': attribute type 89 has an invalid length. [ 193.930176][ T9386] netlink: 'syz.3.999': attribute type 266 has an invalid length. [ 194.181662][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.188495][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400366][ T9409] netlink: 'syz.4.1007': attribute type 5 has an invalid length. [ 194.703649][ T9418] netlink: 'syz.0.1010': attribute type 14 has an invalid length. [ 195.244039][ T9445] syzkaller0: entered promiscuous mode [ 195.265563][ T9445] syzkaller0: entered allmulticast mode [ 195.509182][ T9456] __nla_validate_parse: 5 callbacks suppressed [ 195.509201][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 195.692027][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 195.742793][ T9463] netlink: 'syz.3.1025': attribute type 14 has an invalid length. [ 195.881333][ T9419] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 196.192258][ T9484] x_tables: duplicate underflow at hook 1 [ 196.278373][ T9492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.490840][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 196.530128][ T9496] syzkaller0: entered promiscuous mode [ 196.539713][ T9496] syzkaller0: entered allmulticast mode [ 196.550910][ T9502] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1037'. [ 196.571783][ T9505] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1037'. [ 196.834884][ T9512] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 197.071165][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 197.112547][ T9533] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.224802][ T9533] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.242971][ T9543] validate_nla: 2 callbacks suppressed [ 197.242989][ T9543] netlink: 'syz.2.1049': attribute type 2 has an invalid length. [ 197.262626][ T9543] netlink: 'syz.2.1049': attribute type 9 has an invalid length. [ 197.275732][ T9543] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1049'. [ 197.364105][ T9533] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.410388][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 197.432694][ T9549] netlink: 'syz.1.1051': attribute type 14 has an invalid length. [ 197.474985][ T9533] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.590507][ T9556] syzkaller0: entered promiscuous mode [ 197.596321][ T9556] syzkaller0: entered allmulticast mode [ 197.651774][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.709290][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.751175][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1054'. [ 197.766105][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.814814][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.948720][ T9563] netlink: 'syz.1.1056': attribute type 1 has an invalid length. [ 198.496293][ T9585] syzkaller0: entered promiscuous mode [ 198.506080][ T9585] syzkaller0: entered allmulticast mode [ 198.862317][ T9599] IPVS: Unknown mcast interface: veth0_to_batadv [ 198.875388][ T9602] syzkaller0: entered promiscuous mode [ 198.890266][ T9602] syzkaller0: entered allmulticast mode [ 199.197137][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 199.236574][ T9619] netlink: 'syz.3.1073': attribute type 5 has an invalid length. [ 199.305645][ T9619] geneve5: entered promiscuous mode [ 199.327305][ T9619] geneve5: entered allmulticast mode [ 199.349980][ T1116] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 199.360897][ T1116] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 199.379862][ T1116] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 199.397127][ T1116] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 199.829087][ T9641] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 199.967949][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.975688][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.044459][ T9632] batman_adv: batadv0: Interface deactivated: dummy0 [ 200.414697][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.449867][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.733908][ T9632] geneve2: left promiscuous mode [ 200.749844][ T9632] gretap1: left allmulticast mode [ 200.760134][ T9632] xfrm1: left allmulticast mode [ 200.767867][ T9632] geneve3: left promiscuous mode [ 200.772839][ T9632] geneve3: left allmulticast mode [ 200.884975][ T9632] veth3: left promiscuous mode [ 200.893652][ T9632] geneve5: left promiscuous mode [ 200.898910][ T9632] geneve5: left allmulticast mode [ 200.936318][ T9641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 200.982827][ T35] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.015147][ T35] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.051819][ T35] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.087871][ T35] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.114765][ T35] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.124577][ T35] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.133594][ T35] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.142105][ T35] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.279088][ T9665] __nla_validate_parse: 2 callbacks suppressed [ 201.279108][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1090'. [ 201.369880][ T10] IPVS: starting estimator thread 0... [ 201.374819][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 201.384483][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 201.384542][ T9670] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 201.444556][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 201.459113][ T9675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1092'. [ 201.475701][ T50] block nbd2: Receive control failed (result -32) [ 201.487035][ T9672] IPVS: using max 32 ests per chain, 76800 per kthread [ 201.538411][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 201.693094][ T9685] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1093'. [ 201.738593][ T9688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1097'. [ 202.006573][ T9698] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 202.377447][ T9717] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1108'. [ 202.415147][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 202.481623][ T9718] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 203.826155][ T9761] vlan3: entered promiscuous mode [ 203.831935][ T9761] hsr0: entered promiscuous mode [ 203.838404][ T9761] vlan3: entered allmulticast mode [ 203.843725][ T9761] hsr0: entered allmulticast mode [ 203.858999][ T9761] hsr_slave_0: entered allmulticast mode [ 203.875752][ T9761] hsr_slave_1: entered allmulticast mode [ 203.989526][ T9762] hsr_slave_0: left promiscuous mode [ 204.009334][ T9762] hsr_slave_1: left promiscuous mode [ 204.472073][ T9792] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 204.658300][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.668582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.898005][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.036118][ T1116] tipc: Subscription rejected, illegal request [ 205.697920][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.706224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.738282][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.746600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.201971][ T9774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.368170][ T9833] __nla_validate_parse: 5 callbacks suppressed [ 207.368188][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 207.394103][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 207.419039][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1146'. [ 207.434623][ T9833] bond0: ARP target 170.170.170.170 is already present [ 207.447520][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1146'. [ 207.458648][ T9833] bond0: option arp_ip_target: invalid value (2863311530) [ 207.593922][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 207.777958][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.786338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.937832][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.953486][ T9867] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 207.985131][ T9867] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 208.451825][ T9880] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.1157'. [ 208.554142][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 208.778727][ T9899] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 208.818432][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.826915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.841932][ T9899] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 208.880572][ T9899] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 208.888971][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 208.900027][ T9899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 208.958768][ T9899] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 209.013567][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 209.036040][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 209.083215][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.094557][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.103112][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.113969][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.152818][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 209.275338][ T13] smbdirect: ib_dev[syz2] removed [ 209.753714][ T9945] syzkaller0: entered promiscuous mode [ 209.772617][ T9945] syzkaller0: entered allmulticast mode [ 209.859420][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.867819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.162262][ T9963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.301637][ T9971] pim6reg1: entered promiscuous mode [ 210.317733][ T9971] pim6reg1: entered allmulticast mode [ 210.330537][ T9963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.464422][ T9963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.592928][ T9963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.660025][ T9992] syzkaller0: entered promiscuous mode [ 210.668213][ T9992] syzkaller0: entered allmulticast mode [ 210.827034][ T1116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.843828][ T1116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.898147][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.000645][ T1116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.115474][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.611618][T10035] batadv0: entered promiscuous mode [ 211.681696][T10043] netlink: 'syz.4.1210': attribute type 11 has an invalid length. [ 211.958092][ T5756] net_ratelimit: 3 callbacks suppressed [ 211.958109][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.972182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.624933][T10090] __nla_validate_parse: 9 callbacks suppressed [ 212.624951][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 212.979643][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.988082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.000439][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 213.031703][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 213.463203][T10123] netlink: 'syz.0.1232': attribute type 89 has an invalid length. [ 213.471891][T10123] netlink: 'syz.0.1232': attribute type 266 has an invalid length. [ 214.018076][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.026271][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.034680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.661991][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.057950][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.066278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.807927][T10094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.005496][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 216.016231][T10133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1235'. [ 216.036416][T10134] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1237'. [ 216.106091][T10135] bond9: entered promiscuous mode [ 216.115143][T10135] bond9: entered allmulticast mode [ 216.301382][T10151] netlink: 'syz.4.1242': attribute type 89 has an invalid length. [ 216.318031][T10151] netlink: 'syz.4.1242': attribute type 266 has an invalid length. [ 216.587665][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1246'. [ 216.683592][T10164] vlan2: entered promiscuous mode [ 216.695285][T10164] team0: entered promiscuous mode [ 216.728634][T10164] team_slave_0: entered promiscuous mode [ 216.743649][T10164] team_slave_1: entered promiscuous mode [ 216.983405][T10178] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 217.013708][T10184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1253'. [ 217.027593][T10178] net_ratelimit: 2 callbacks suppressed [ 217.068007][T10184] nbd: must specify a size in bytes for the device [ 217.070090][T10178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.139500][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.147906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.384298][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 217.699400][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.771774][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'. [ 217.998243][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 218.179130][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.187670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.379726][T10265] netlink: 'syz.2.1274': attribute type 4 has an invalid length. [ 218.387863][T10265] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1274'. [ 218.498517][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.508665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.590849][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 218.651624][T10282] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 218.664574][T10282] pim6reg0: persist disabled [ 218.788661][T10292] netlink: 'syz.3.1282': attribute type 14 has an invalid length. [ 218.991270][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'. [ 219.050603][T10299] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 219.177298][T10299] 8021q: adding VLAN 0 to HW filter on device bond10 [ 219.218061][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.226446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.514855][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1291'. [ 219.633893][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 219.678479][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1291'. [ 219.768269][T10344] netlink: 'syz.1.1295': attribute type 14 has an invalid length. [ 219.872085][T10348] tipc: Started in network mode [ 219.897542][T10348] tipc: Node identity 92c92bc67402, cluster identity 4711 [ 219.918373][T10348] tipc: Enabled bearer , priority 0 [ 219.949876][T10354] syzkaller0: entered promiscuous mode [ 219.973759][T10354] syzkaller0: entered allmulticast mode [ 220.000053][T10348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 220.021826][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'. [ 220.088651][T10359] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 220.222353][T10348] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1296'. [ 220.279208][T10359] 8021q: adding VLAN 0 to HW filter on device bond10 [ 220.305543][T10363] tipc: Resetting bearer [ 220.573959][T10346] tipc: Resetting bearer [ 220.635922][T10346] tipc: Disabling bearer [ 221.009504][T10380] syzkaller0: entered promiscuous mode [ 221.022792][T10380] syzkaller0: entered allmulticast mode [ 221.051439][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.059363][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.065727][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.072156][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.078542][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.084924][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.091343][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.097719][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.104112][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.110526][T10380] tc action pedit 'at' offset 2047 out of bounds [ 221.604639][T10399] syzkaller0: entered promiscuous mode [ 221.626984][T10399] syzkaller0: entered allmulticast mode [ 221.681258][T10399] tipc: Enabling of bearer rejected, failed to enable media [ 222.251270][T10421] netlink: 'syz.1.1319': attribute type 89 has an invalid length. [ 222.262426][T10421] netlink: 'syz.1.1319': attribute type 266 has an invalid length. [ 222.338496][ T7854] net_ratelimit: 6 callbacks suppressed [ 222.338516][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.352447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.959472][T10444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.978214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.000732][T10444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.000799][T10443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.010152][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.048216][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.080962][T10444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.089499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.116503][T10444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.116596][T10451] __nla_validate_parse: 6 callbacks suppressed [ 223.116608][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 223.161072][T10443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.242260][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 223.361367][T10464] sit0: entered promiscuous mode [ 223.366626][T10464] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 223.374519][T10464] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1334'. [ 223.405652][T10461] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 223.429715][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 223.454664][T10461] bond0: (slave bond_slave_0): Releasing backup interface [ 223.526178][T10461] bond_slave_0: entered promiscuous mode [ 223.535087][T10461] bond_slave_0: entered allmulticast mode [ 223.886845][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'. [ 223.902273][T10486] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 223.968853][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 223.975751][T10485] xfrm1: entered allmulticast mode [ 223.985752][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 224.029301][T10481] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 224.060097][T10486] gretap2: entered promiscuous mode [ 224.070869][T10478] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.270292][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 224.668474][T10514] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1346'. [ 224.804625][T10527] netlink: 'syz.4.1350': attribute type 89 has an invalid length. [ 224.830352][T10527] netlink: 'syz.4.1350': attribute type 266 has an invalid length. [ 225.026354][T10537] Bluetooth: MGMT ver 1.23 [ 225.044468][T10542] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1354'. [ 225.712663][T10554] gretap0: entered promiscuous mode [ 226.383379][T10580] netlink: 'syz.1.1363': attribute type 89 has an invalid length. [ 226.413209][T10580] netlink: 'syz.1.1363': attribute type 266 has an invalid length. [ 227.534750][T10616] netlink: 'syz.0.1376': attribute type 89 has an invalid length. [ 227.541157][ T7854] net_ratelimit: 20 callbacks suppressed [ 227.541186][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.555854][T10616] netlink: 'syz.0.1376': attribute type 266 has an invalid length. [ 227.556843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.643441][T10618] netlink: 'syz.2.1377': attribute type 13 has an invalid length. [ 227.835148][T10626] IPVS: length: 35 != 24 [ 227.940467][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.116727][T10635] syzkaller0: entered promiscuous mode [ 228.140608][T10635] syzkaller0: entered allmulticast mode [ 228.164013][T10641] __nla_validate_parse: 13 callbacks suppressed [ 228.164029][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 228.193123][T10635] tipc: Enabling of bearer rejected, failed to enable media [ 228.222403][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1384'. [ 228.248579][T10644] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 228.424422][T10638] dummy0: entered allmulticast mode [ 228.578257][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.586631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.932407][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 229.506351][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 229.550679][T10690] validate_nla: 3 callbacks suppressed [ 229.550700][T10690] netlink: 'syz.2.1403': attribute type 89 has an invalid length. [ 229.565425][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1402'. [ 229.581051][T10690] netlink: 'syz.2.1403': attribute type 266 has an invalid length. [ 229.594390][T10692] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 229.623650][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.632071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.678667][T10692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.695585][T10702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1406'. [ 229.727347][T10702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.736106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.249337][T10735] xt_hashlimit: size too large, truncated to 1048576 [ 230.658716][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.822686][T10752] bridge_slave_0: left allmulticast mode [ 230.836518][T10752] bridge_slave_0: left promiscuous mode [ 230.844631][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.870383][T10752] bridge_slave_1: left allmulticast mode [ 230.892008][T10752] bridge_slave_1: left promiscuous mode [ 230.924548][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.994568][T10752] bond0: (slave bond_slave_0): Releasing backup interface [ 231.013937][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 231.062627][T10752] bond0: (slave bond_slave_1): Releasing backup interface [ 231.125874][T10752] team0: Port device team_slave_0 removed [ 231.170221][T10752] team0: Port device team_slave_1 removed [ 231.194330][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.205164][T10752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.229558][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 231.263695][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 231.444486][T10794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'. [ 232.026268][T10813] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 232.738028][ T5739] net_ratelimit: 5 callbacks suppressed [ 232.738046][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.751982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.828363][T10852] netlink: 'syz.3.1447': attribute type 14 has an invalid length. [ 233.238326][T10861] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 233.400658][T10870] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 233.564590][T10878] erspan1: entered allmulticast mode [ 233.704619][T10883] netlink: 'syz.0.1458': attribute type 14 has an invalid length. [ 233.752689][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.779338][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.785230][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.787747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.855633][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.885869][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.998918][T10898] __nla_validate_parse: 2 callbacks suppressed [ 233.998935][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 234.024783][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.035425][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 234.320263][T10911] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 234.380284][T10914] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1465'. [ 234.555026][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1469'. [ 234.622368][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 234.757843][T10937] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1474'. [ 234.817882][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.826277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.075537][T10964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1485'. [ 235.133769][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 235.174911][T10962] xt_hashlimit: size too large, truncated to 1048576 [ 235.198679][T10971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.253161][T10971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.281580][T10978] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 235.307082][T10971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.326101][T10978] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1484'. [ 235.380878][T10981] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1484'. [ 236.193109][T11044] netlink: 'syz.4.1495': attribute type 39 has an invalid length. [ 236.584600][T11054] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.759847][T11054] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.910271][T11054] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.940597][T11071] netlink: 'syz.4.1502': attribute type 89 has an invalid length. [ 236.976342][T11071] netlink: 'syz.4.1502': attribute type 266 has an invalid length. [ 237.033415][T11077] erspan0: entered promiscuous mode [ 237.086768][T11054] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.333244][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.406746][ T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.433175][ T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.478723][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.940659][ T7854] net_ratelimit: 14 callbacks suppressed [ 237.940679][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.954889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.964838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.367557][T11141] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 238.467867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.511945][T11141] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.622158][T11162] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 238.633376][T11148] bond6: (slave veth7): Enslaving as an active interface with a down link [ 238.704491][T11152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.715553][T11152] bond6: (slave batadv0): making interface the new active one [ 238.735581][T11152] batadv0: entered promiscuous mode [ 238.747395][T11152] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 238.977897][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.986284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.316969][T11191] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 239.350824][T11193] __nla_validate_parse: 4 callbacks suppressed [ 239.350842][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1538'. [ 239.545064][T11202] FAULT_INJECTION: forcing a failure. [ 239.545064][T11202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.559118][T11202] CPU: 1 UID: 0 PID: 11202 Comm: syz.0.1544 Not tainted syzkaller #0 PREEMPT(full) [ 239.559142][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.559157][T11202] Call Trace: [ 239.559165][T11202] [ 239.559172][T11202] dump_stack_lvl+0xe8/0x150 [ 239.559199][T11202] should_fail_ex+0x40c/0x560 [ 239.559230][T11202] _copy_from_user+0x2d/0xb0 [ 239.559260][T11202] wext_handle_ioctl+0xc7/0x1d0 [ 239.559288][T11202] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 239.559311][T11202] ? hook_file_ioctl+0x1f0/0x5c0 [ 239.559350][T11202] sock_ioctl+0x159/0x7e0 [ 239.559376][T11202] ? __pfx_sock_ioctl+0x10/0x10 [ 239.559397][T11202] ? __fget_files+0x2a/0x420 [ 239.559417][T11202] ? __fget_files+0x3a2/0x420 [ 239.559436][T11202] ? __fget_files+0x2a/0x420 [ 239.559460][T11202] ? bpf_lsm_file_ioctl+0x9/0x20 [ 239.559488][T11202] ? __pfx_sock_ioctl+0x10/0x10 [ 239.559509][T11202] __se_sys_ioctl+0xfc/0x170 [ 239.559534][T11202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.559554][T11202] do_syscall_64+0x174/0x580 [ 239.559572][T11202] ? trace_irq_disable+0x3b/0x140 [ 239.559596][T11202] ? clear_bhb_loop+0x40/0x90 [ 239.559618][T11202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.559636][T11202] RIP: 0033:0x7fe7d639ce59 [ 239.559654][T11202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.559668][T11202] RSP: 002b:00007fe7d7336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.559687][T11202] RAX: ffffffffffffffda RBX: 00007fe7d6615fa0 RCX: 00007fe7d639ce59 [ 239.559700][T11202] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 239.559712][T11202] RBP: 00007fe7d7336090 R08: 0000000000000000 R09: 0000000000000000 [ 239.559723][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.559733][T11202] R13: 00007fe7d6616038 R14: 00007fe7d6615fa0 R15: 00007fff97eb6a98 [ 239.559762][T11202] [ 239.847849][T11209] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 239.900650][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1546'. [ 240.017896][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.026241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.101118][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.114289][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 240.235844][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 240.246899][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 240.324309][T11227] 5nè: entered promiscuous mode [ 240.390918][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1554'. [ 240.405045][T11231] netlink: 'syz.4.1554': attribute type 1 has an invalid length. [ 240.449322][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1555'. [ 240.517077][T11237] FAULT_INJECTION: forcing a failure. [ 240.517077][T11237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.539756][T11237] CPU: 0 UID: 0 PID: 11237 Comm: syz.0.1557 Not tainted syzkaller #0 PREEMPT(full) [ 240.539779][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.539788][T11237] Call Trace: [ 240.539795][T11237] [ 240.539804][T11237] dump_stack_lvl+0xe8/0x150 [ 240.539829][T11237] should_fail_ex+0x40c/0x560 [ 240.539860][T11237] _copy_to_user+0x31/0xb0 [ 240.539882][T11237] simple_read_from_buffer+0xe1/0x170 [ 240.539908][T11237] proc_fail_nth_read+0x1bb/0x230 [ 240.539932][T11237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.539957][T11237] ? rw_verify_area+0x24a/0x4c0 [ 240.539981][T11237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.540001][T11237] vfs_read+0x213/0xa80 [ 240.540029][T11237] ? __pfx___mutex_lock+0x10/0x10 [ 240.540050][T11237] ? __pfx_vfs_read+0x10/0x10 [ 240.540074][T11237] ? __fget_files+0x2a/0x420 [ 240.540099][T11237] ? __fget_files+0x3a2/0x420 [ 240.540118][T11237] ? __fget_files+0x2a/0x420 [ 240.540146][T11237] ksys_read+0x150/0x270 [ 240.540170][T11237] ? __pfx_ksys_read+0x10/0x10 [ 240.540190][T11237] ? __pfx_sock_ioctl+0x10/0x10 [ 240.540218][T11237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.540236][T11237] do_syscall_64+0x174/0x580 [ 240.540254][T11237] ? trace_irq_disable+0x3b/0x140 [ 240.540278][T11237] ? clear_bhb_loop+0x40/0x90 [ 240.540300][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.540317][T11237] RIP: 0033:0x7fe7d635d68e [ 240.540335][T11237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.540348][T11237] RSP: 002b:00007fe7d7335fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.540367][T11237] RAX: ffffffffffffffda RBX: 00007fe7d73366c0 RCX: 00007fe7d635d68e [ 240.540380][T11237] RDX: 000000000000000f RSI: 00007fe7d73360a0 RDI: 0000000000000005 [ 240.540391][T11237] RBP: 00007fe7d7336090 R08: 0000000000000000 R09: 0000000000000000 [ 240.540403][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.540411][T11237] R13: 00007fe7d6616038 R14: 00007fe7d6615fa0 R15: 00007fff97eb6a98 [ 240.540440][T11237] [ 240.888039][T11246] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1560'. [ 241.057972][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.270931][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 241.399477][ T48] nci: nci_rx_work: unknown MT 0x1 [ 241.435794][T11260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.290598][T11312] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 242.370264][T11316] syzkaller0: entered promiscuous mode [ 242.382264][T11316] syzkaller0: entered allmulticast mode [ 243.001857][T11354] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 243.017436][T11354] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 243.018204][ T5732] net_ratelimit: 32 callbacks suppressed [ 243.018219][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.108191][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.137946][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.146329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.172474][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.209687][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.328501][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.488233][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.916401][T11398] netlink: 'syz.4.1599': attribute type 89 has an invalid length. [ 243.952625][T11398] netlink: 'syz.4.1599': attribute type 266 has an invalid length. [ 244.126007][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1600'. [ 244.178389][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.186770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.357113][T11417] netlink: 'syz.4.1605': attribute type 2 has an invalid length. [ 244.373789][T11417] netlink: 'syz.4.1605': attribute type 8 has an invalid length. [ 244.384596][T11417] netlink: 'syz.4.1605': attribute type 9 has an invalid length. [ 244.395084][T11417] netlink: 'syz.4.1605': attribute type 10 has an invalid length. [ 244.395115][T11420] __nla_validate_parse: 1 callbacks suppressed [ 244.395127][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 244.577186][T11427] IPVS: persistence engine module ip_vs_pe_À not found [ 244.678848][T11439] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.759766][T11439] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.840996][T11439] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.965093][T11439] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.006989][T11451] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1618'. [ 245.065850][T11467] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1620'. [ 245.159361][T11460] bond7: entered promiscuous mode [ 245.172678][T11460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.253355][T11474] syzkaller0: entered promiscuous mode [ 245.277458][T11474] syzkaller0: entered allmulticast mode [ 245.406261][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1626'. [ 245.420068][T11483] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 245.468278][ T1131] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.548441][ T1131] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.621843][ T1131] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.640657][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 245.665607][ T1107] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.680317][T11491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1629'. [ 245.735983][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 245.965430][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1641'. [ 246.280588][T11527] netlink: 'syz.3.1644': attribute type 13 has an invalid length. [ 246.303099][T11527] netlink: 'syz.3.1644': attribute type 17 has an invalid length. [ 246.367520][ T77] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.382556][ T77] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.484149][T11527] gretap0: left promiscuous mode [ 246.573848][T11552] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1649'. [ 246.575020][T11527] sit0: left promiscuous mode [ 246.708715][T11527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.742100][T11527] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.758846][T11564] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 246.774707][T11527] batman_adv: batadv0: Interface activated: dummy0 [ 246.789379][T11565] netlink: 'syz.1.1650': attribute type 11 has an invalid length. [ 246.801395][T11527] batadv0: left promiscuous mode [ 246.821333][T11527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.900905][T11527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.914383][T11527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.936095][T11527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.954084][T11527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.988031][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.995237][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.017503][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.024688][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.083043][ T77] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.092764][ T77] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.106953][T11539] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.118963][T11550] netlink: 'syz.2.1648': attribute type 13 has an invalid length. [ 247.136386][T11550] netlink: 'syz.2.1648': attribute type 12 has an invalid length. [ 247.230317][T11571] syzkaller1: entered promiscuous mode [ 247.235996][T11571] syzkaller1: entered allmulticast mode [ 248.345076][ T7854] net_ratelimit: 31 callbacks suppressed [ 248.345097][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.359371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.220800][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.379822][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.388260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.798705][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1659'. [ 249.824183][T11593] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 249.981238][T11593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.017395][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 250.086136][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1666'. [ 250.148197][ T134] batadv0: left promiscuous mode [ 250.321162][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 250.341053][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1674'. [ 250.352700][T11631] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 250.356083][T11629] netlink: 'syz.3.1671': attribute type 3 has an invalid length. [ 250.369356][T11629] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1671'. [ 250.418472][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.426830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.490993][T11643] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1677'. [ 250.730056][T11656] FAULT_INJECTION: forcing a failure. [ 250.730056][T11656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.744387][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz.4.1682 Not tainted syzkaller #0 PREEMPT(full) [ 250.744411][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.744422][T11656] Call Trace: [ 250.744430][T11656] [ 250.744438][T11656] dump_stack_lvl+0xe8/0x150 [ 250.744464][T11656] should_fail_ex+0x40c/0x560 [ 250.744497][T11656] _copy_from_user+0x2d/0xb0 [ 250.744519][T11656] kstrtouint_from_user+0xd6/0x180 [ 250.744547][T11656] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 250.744590][T11656] proc_fail_nth_write+0x8e/0x210 [ 250.744614][T11656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.744645][T11656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.744667][T11656] vfs_write+0x296/0xba0 [ 250.744700][T11656] ? __pfx_vfs_write+0x10/0x10 [ 250.744726][T11656] ? __fget_files+0x2a/0x420 [ 250.744752][T11656] ? __fget_files+0x3a2/0x420 [ 250.744772][T11656] ? __fget_files+0x2a/0x420 [ 250.744801][T11656] ksys_write+0x150/0x270 [ 250.744828][T11656] ? __pfx_ksys_write+0x10/0x10 [ 250.744852][T11656] ? __pfx_sock_ioctl+0x10/0x10 [ 250.744885][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.744905][T11656] do_syscall_64+0x174/0x580 [ 250.744924][T11656] ? trace_irq_disable+0x3b/0x140 [ 250.744955][T11656] ? clear_bhb_loop+0x40/0x90 [ 250.744979][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.744997][T11656] RIP: 0033:0x7f82ff15d68e [ 250.745014][T11656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.745029][T11656] RSP: 002b:00007f830005ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.745048][T11656] RAX: ffffffffffffffda RBX: 00007f83000606c0 RCX: 00007f82ff15d68e [ 250.745061][T11656] RDX: 0000000000000001 RSI: 00007f83000600a0 RDI: 0000000000000005 [ 250.745073][T11656] RBP: 00007f8300060090 R08: 0000000000000000 R09: 0000000000000000 [ 250.745084][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.745094][T11656] R13: 00007f82ff416038 R14: 00007f82ff415fa0 R15: 00007ffe5148f498 [ 250.745126][T11656] [ 251.327012][T11669] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.458450][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.466839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.758724][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1693'. [ 252.258179][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.538669][ T7854] net_ratelimit: 2 callbacks suppressed [ 253.538688][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.552825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.406914][T11702] veth9: entered promiscuous mode [ 254.579655][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.588105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.642569][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 254.671081][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 255.166417][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.174958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.190233][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.202310][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.216250][T11762] __nla_validate_parse: 1 callbacks suppressed [ 255.216272][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1712'. [ 255.222698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.253083][T11775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.543035][ T29] audit: type=1800 audit(1781333955.295:3): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1720" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1531 res=0 errno=0 [ 255.569850][T11784] netlink: 'syz.2.1720': attribute type 5 has an invalid length. [ 255.621102][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.818389][T11789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1722'. [ 256.354564][T11814] syzkaller0: entered promiscuous mode [ 256.381075][T11814] syzkaller0: entered allmulticast mode [ 256.457912][T11814] tipc: Started in network mode [ 256.463060][T11814] tipc: Node identity a6ea6697b9cf, cluster identity 4711 [ 256.471089][T11814] tipc: Enabled bearer , priority 0 [ 256.507997][T11813] tipc: Resetting bearer [ 256.576884][T11813] tipc: Disabling bearer [ 256.643882][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 257.014762][T11829] FAULT_INJECTION: forcing a failure. [ 257.014762][T11829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.041373][T11829] CPU: 0 UID: 0 PID: 11829 Comm: syz.0.1734 Not tainted syzkaller #0 PREEMPT(full) [ 257.041400][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.041411][T11829] Call Trace: [ 257.041418][T11829] [ 257.041425][T11829] dump_stack_lvl+0xe8/0x150 [ 257.041454][T11829] should_fail_ex+0x40c/0x560 [ 257.041487][T11829] _copy_to_user+0x31/0xb0 [ 257.041509][T11829] simple_read_from_buffer+0xe1/0x170 [ 257.041537][T11829] proc_fail_nth_read+0x1bb/0x230 [ 257.041562][T11829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.041595][T11829] ? rw_verify_area+0x24a/0x4c0 [ 257.041621][T11829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.041642][T11829] vfs_read+0x213/0xa80 [ 257.041672][T11829] ? __pfx___mutex_lock+0x10/0x10 [ 257.041694][T11829] ? __pfx_vfs_read+0x10/0x10 [ 257.041719][T11829] ? __fget_files+0x2a/0x420 [ 257.041745][T11829] ? __fget_files+0x3a2/0x420 [ 257.041765][T11829] ? __fget_files+0x2a/0x420 [ 257.041794][T11829] ksys_read+0x150/0x270 [ 257.041821][T11829] ? __pfx_ksys_read+0x10/0x10 [ 257.041844][T11829] ? __pfx_sock_ioctl+0x10/0x10 [ 257.041871][T11829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.041891][T11829] do_syscall_64+0x174/0x580 [ 257.041910][T11829] ? trace_irq_disable+0x3b/0x140 [ 257.041934][T11829] ? clear_bhb_loop+0x40/0x90 [ 257.041956][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.041974][T11829] RIP: 0033:0x7fe7d635d68e [ 257.041992][T11829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.042007][T11829] RSP: 002b:00007fe7d7335fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.042026][T11829] RAX: ffffffffffffffda RBX: 00007fe7d73366c0 RCX: 00007fe7d635d68e [ 257.042040][T11829] RDX: 000000000000000f RSI: 00007fe7d73360a0 RDI: 0000000000000004 [ 257.042051][T11829] RBP: 00007fe7d7336090 R08: 0000000000000000 R09: 0000000000000000 [ 257.042062][T11829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.042072][T11829] R13: 00007fe7d6616038 R14: 00007fe7d6615fa0 R15: 00007fff97eb6a98 [ 257.042103][T11829] [ 257.056581][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 257.329844][T11848] xt_TCPMSS: Only works on TCP SYN packets [ 257.340569][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.351026][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.353917][T11831] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 257.373093][T11840] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.380356][T11840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.389333][T11840] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.396543][T11840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.405719][T11840] bridge0: entered promiscuous mode [ 257.411119][T11840] bridge0: entered allmulticast mode [ 257.421591][T11831] netlink: 'syz.4.1735': attribute type 2 has an invalid length. [ 257.615692][T11859] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1740'. [ 257.867559][T11872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.925803][T11873] veth3: entered promiscuous mode [ 258.381139][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 258.390983][T11893] netlink: 'syz.4.1751': attribute type 30 has an invalid length. [ 258.443506][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 258.468658][T11896] netlink: 'syz.4.1751': attribute type 30 has an invalid length. [ 260.717526][T11029] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.746526][T11029] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.767349][T11029] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.793625][T11029] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.991784][T11920] tipc: Enabled bearer , priority 2 [ 261.034488][T11924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1756'. [ 261.054735][T11924] nbd: must specify at least one socket [ 261.067500][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 261.340458][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 261.350073][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 261.350129][T11937] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 261.371403][T11936] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 261.388847][ T5732] net_ratelimit: 9 callbacks suppressed [ 261.388866][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.412165][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 261.436794][T11940] netlink: 'syz.1.1765': attribute type 15 has an invalid length. [ 261.513712][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1767'. [ 261.699653][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.710633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.790821][T11959] syzkaller0: entered promiscuous mode [ 261.818780][T11959] syzkaller0: entered allmulticast mode [ 262.152513][ T808] tipc: Node number set to 3408009050 [ 262.154911][T11983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1779'. [ 262.184028][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 262.222695][T11990] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 262.318261][T11994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.326710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.361995][T11027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.374033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.384182][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.414911][T11999] syzkaller0: entered promiscuous mode [ 262.436415][T11999] syzkaller0: entered allmulticast mode [ 262.490561][T11999] tipc: Enabled bearer , priority 0 [ 262.504011][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1787'. [ 262.515192][T12007] netlink: 'syz.0.1787': attribute type 1 has an invalid length. [ 262.529902][T11996] tipc: Resetting bearer [ 262.569238][T11996] tipc: Disabling bearer [ 262.669012][T12007] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.705753][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 262.715137][T12015] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 262.833330][T12019] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 263.095662][T12031] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 263.258458][T12038] netlink: 'syz.4.1799': attribute type 1 has an invalid length. [ 263.360043][T12038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.636476][T12066] netlink: 'syz.0.1804': attribute type 1 has an invalid length. [ 263.705235][T12075] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 263.726886][T12078] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 263.747204][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.755637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.875649][T12085] bond10: down delay (7) is not a multiple of miimon (8), value rounded to 0 ms [ 263.899921][T12085] bond10 (unregistering): Released all slaves [ 264.050581][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.060084][T12069] bridge0: entered allmulticast mode [ 264.079432][T12069] bridge_slave_1: left promiscuous mode [ 264.080018][T12096] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 264.091111][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.108439][T12069] bridge_slave_0: left allmulticast mode [ 264.114201][T12069] bridge_slave_0: left promiscuous mode [ 264.120186][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.171325][T12096] 8021q: adding VLAN 0 to HW filter on device bond11 [ 264.246726][ T7854] IPVS: starting estimator thread 0... [ 264.348047][T12102] IPVS: using max 29 ests per chain, 69600 per kthread [ 264.485970][T12114] sctp: [Deprecated]: syz.1.1818 (pid 12114) Use of int in max_burst socket option. [ 264.485970][T12114] Use struct sctp_assoc_value instead [ 264.839999][T12130] 8021q: adding VLAN 0 to HW filter on device bond12 [ 264.974757][T12139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.313083][T12163] xt_policy: output policy not valid in PREROUTING and INPUT [ 265.794357][T12180] ip6erspan0: entered allmulticast mode [ 265.861278][T12183] tipc: Enabling of bearer rejected, failed to enable media [ 266.022329][T12191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.396365][T12205] __nla_validate_parse: 15 callbacks suppressed [ 266.396384][T12205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1845'. [ 266.527314][T12218] validate_nla: 4 callbacks suppressed [ 266.527335][T12218] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 266.634551][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 266.670562][T12230] net_ratelimit: 1 callbacks suppressed [ 266.670578][T12230] openvswitch: netlink: Message has 2 unknown bytes. [ 266.677473][T12218] gretap1: entered allmulticast mode [ 266.686606][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 266.698174][T12230] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1853'. [ 266.735400][T12218] bond12: (slave gretap1): making interface the new active one [ 266.765706][T12218] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 267.062175][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1865'. [ 267.086436][T12262] netlink: 'syz.4.1865': attribute type 12 has an invalid length. [ 267.106139][T12262] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1865'. [ 267.123160][T12264] bond1: left promiscuous mode [ 267.133740][T12264] bond1: left allmulticast mode [ 267.140584][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.149079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.150384][T12264] bond7: left promiscuous mode [ 267.163955][T12264] vlan2: left promiscuous mode [ 267.169544][T12264] geneve1: left promiscuous mode [ 267.187098][T12264] vlan2: left allmulticast mode [ 267.202934][T12264] geneve1: left allmulticast mode [ 267.222748][T12264] vlan3: left allmulticast mode [ 267.231428][T12266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.239164][T12264] bond0: left allmulticast mode [ 267.241713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.245002][T12264] bond_slave_0: left allmulticast mode [ 267.259173][T12264] bond_slave_1: left allmulticast mode [ 267.265845][T12264] veth9: left promiscuous mode [ 267.274330][T12264] gretap1: left allmulticast mode [ 267.282643][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 267.399493][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 267.430079][T12273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.460589][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.030729][T12305] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 268.127846][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1881'. [ 268.311459][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 268.486878][ T7854] hid (null): unknown global tag 0xb4 [ 268.495375][ T7854] hid (null): unknown global tag 0xd [ 268.523342][ T7854] hid-generic 0005:05C2:0040.0001: unexpected long global item [ 268.537062][ T7854] hid-generic 0005:05C2:0040.0001: probe with driver hid-generic failed with error -22 [ 269.420191][T12369] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 269.437436][T12369] bond11 (unregistering): Released all slaves [ 269.881181][T12390] FAULT_INJECTION: forcing a failure. [ 269.881181][T12390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.940497][T12390] CPU: 1 UID: 0 PID: 12390 Comm: syz.4.1907 Not tainted syzkaller #0 PREEMPT(full) [ 269.940523][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.940532][T12390] Call Trace: [ 269.940539][T12390] [ 269.940547][T12390] dump_stack_lvl+0xe8/0x150 [ 269.940570][T12390] should_fail_ex+0x40c/0x560 [ 269.940601][T12390] _copy_to_user+0x31/0xb0 [ 269.940621][T12390] simple_read_from_buffer+0xe1/0x170 [ 269.940649][T12390] proc_fail_nth_read+0x1bb/0x230 [ 269.940672][T12390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.940695][T12390] ? rw_verify_area+0x24a/0x4c0 [ 269.940717][T12390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.940736][T12390] vfs_read+0x213/0xa80 [ 269.940762][T12390] ? __pfx___mutex_lock+0x10/0x10 [ 269.940780][T12390] ? __pfx_vfs_read+0x10/0x10 [ 269.940803][T12390] ? __fget_files+0x2a/0x420 [ 269.940825][T12390] ? __fget_files+0x3a2/0x420 [ 269.940842][T12390] ? __fget_files+0x2a/0x420 [ 269.940868][T12390] ksys_read+0x150/0x270 [ 269.940891][T12390] ? __pfx_ksys_read+0x10/0x10 [ 269.940919][T12390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.940936][T12390] do_syscall_64+0x174/0x580 [ 269.940952][T12390] ? trace_irq_disable+0x3b/0x140 [ 269.940974][T12390] ? clear_bhb_loop+0x40/0x90 [ 269.940993][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.941008][T12390] RIP: 0033:0x7f82ff15d68e [ 269.941024][T12390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.941036][T12390] RSP: 002b:00007f830003efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.941054][T12390] RAX: ffffffffffffffda RBX: 00007f830003f6c0 RCX: 00007f82ff15d68e [ 269.941065][T12390] RDX: 000000000000000f RSI: 00007f830003f0a0 RDI: 0000000000000004 [ 269.941075][T12390] RBP: 00007f830003f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.941084][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.941093][T12390] R13: 00007f82ff416128 R14: 00007f82ff416090 R15: 00007ffe5148f498 [ 269.941120][T12390] [ 270.153241][T12398] batadv_slave_1: entered promiscuous mode [ 270.333114][T12409] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 270.499389][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.832624][T12431] netlink: 'syz.4.1919': attribute type 3 has an invalid length. [ 271.019488][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.028888][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.237772][T12448] netlink: 'syz.3.1924': attribute type 3 has an invalid length. [ 271.576223][T12452] __nla_validate_parse: 9 callbacks suppressed [ 271.576245][T12452] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1928'. [ 271.734319][T12457] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 271.771229][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 271.919284][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1930'. [ 271.941787][T12462] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.985719][T12462] bond6: (slave bond7): making interface the new active one [ 272.004119][T12462] bond6: (slave bond7): Enslaving as an active interface with an up link [ 272.067340][T12457] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 272.102245][T12473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.129816][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 272.196740][T12482] netlink: 'syz.1.1933': attribute type 6 has an invalid length. [ 272.258841][ T134] net_ratelimit: 20 callbacks suppressed [ 272.258859][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.272901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.411873][T12498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1940'. [ 272.571311][ T50] Bluetooth: hci4: link tx timeout [ 272.581748][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 272.711115][T12518] netlink: 'syz.2.1948': attribute type 4 has an invalid length. [ 272.742909][T12518] netlink: 'syz.2.1948': attribute type 4 has an invalid length. [ 272.816292][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 272.880600][T12528] bond8: ARP target 9.0.0.0 is already present [ 272.886842][T12528] bond8: option arp_ip_target: invalid value (9) [ 272.895251][T12528] bond8 (unregistering): Released all slaves [ 272.919813][T12526] team0: No ports can be present during mode change [ 272.929056][T12526] vlan0: entered promiscuous mode [ 272.988787][T12526] team0: Port device vlan0 added [ 273.001985][T12530] tipc: Enabled bearer , priority 0 [ 273.085711][T12537] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 273.151544][T12537] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.218610][T12539] bond11: (slave gretap2): making interface the new active one [ 273.229107][T12539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.240978][T12539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.251477][T12539] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 273.294512][ T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.344368][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.380504][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1958'. [ 273.468330][T12546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1957'. [ 273.538834][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.558881][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.626327][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 273.647570][T12545] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.694214][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.715801][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 274.284581][T12585] TCP: TCP_TX_DELAY enabled [ 274.658291][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 275.152258][T12620] netlink: 'syz.1.1978': attribute type 4 has an invalid length. [ 275.277374][T12620] netlink: 'syz.1.1978': attribute type 4 has an invalid length. [ 275.682160][T12603] netlink: 'syz.3.1970': attribute type 4 has an invalid length. [ 275.714757][T12603] netlink: 'syz.3.1970': attribute type 8 has an invalid length. [ 275.729787][T12650] syzkaller0: entered promiscuous mode [ 275.744995][T12650] syzkaller0: entered allmulticast mode [ 276.172063][T12670] netlink: 'syz.0.1990': attribute type 13 has an invalid length. [ 276.248367][T12673] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 276.947688][T12697] __nla_validate_parse: 4 callbacks suppressed [ 276.947706][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 276.990417][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 277.002951][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 277.283463][T12714] block nbd3: server does not support multiple connections per device. [ 277.297374][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 277.344631][T12714] block nbd3: shutting down sockets [ 277.611331][T12736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2012'. [ 277.628702][ T48] net_ratelimit: 10 callbacks suppressed [ 277.628719][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.758057][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2015'. [ 277.871310][ T29] audit: type=1804 audit(1781333977.615:4): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2017" name="/newroot/389/memory.events" dev="tmpfs" ino=2003 res=1 errno=0 [ 277.877300][T12752] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2019'. [ 277.904744][T12751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2019'. [ 277.927946][ T29] audit: type=1800 audit(1781333977.625:5): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2017" name="memory.events" dev="tmpfs" ino=2003 res=0 errno=0 [ 277.970266][ T29] audit: type=1804 audit(1781333977.655:6): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2017" name="/newroot/389/memory.events" dev="tmpfs" ino=2003 res=1 errno=0 [ 278.018132][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.026651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.398982][T12778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2026'. [ 278.407826][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 278.473872][T12786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.482863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.511922][T12782] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 278.525620][T12783] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 278.600201][T12782] 8021q: adding VLAN 0 to HW filter on device bond9 [ 278.669362][T12783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.678619][T12791] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 278.718974][T12798] : entered promiscuous mode [ 278.811832][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.830202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.136933][T12822] tap0: tun_chr_ioctl cmd 1074025677 [ 279.155422][T12822] tap0: linktype set to 776 [ 279.299866][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.310321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.481089][T12833] ip6tnl0: Caught tx_queue_len zero misconfig [ 279.563680][T12843] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 279.642442][T12843] 8021q: adding VLAN 0 to HW filter on device bond13 [ 279.711078][T12852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.138120][T12877] netlink: 'syz.1.2051': attribute type 15 has an invalid length. [ 280.793623][T12890] syzkaller1: entered promiscuous mode [ 280.807882][T12890] syzkaller1: entered allmulticast mode [ 281.138152][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 281.209525][T12899] FAULT_INJECTION: forcing a failure. [ 281.209525][T12899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.246340][T12899] CPU: 1 UID: 0 PID: 12899 Comm: syz.1.2057 Not tainted syzkaller #0 PREEMPT(full) [ 281.246365][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.246376][T12899] Call Trace: [ 281.246383][T12899] [ 281.246391][T12899] dump_stack_lvl+0xe8/0x150 [ 281.246417][T12899] should_fail_ex+0x40c/0x560 [ 281.246454][T12899] _copy_from_user+0x2d/0xb0 [ 281.246475][T12899] do_ipv6_getsockopt+0x2d0/0x2590 [ 281.246511][T12899] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 281.246534][T12899] ? aa_label_sk_perm+0x532/0x6e0 [ 281.246572][T12899] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 281.246597][T12899] ? _parse_integer_limit+0x1ae/0x1f0 [ 281.246629][T12899] ? __lock_acquire+0x683/0x2cd0 [ 281.246650][T12899] ? kstrtouint+0x6e/0xe0 [ 281.246691][T12899] ? __might_fault+0xaf/0x130 [ 281.246719][T12899] ipv6_getsockopt+0xbd/0x2c0 [ 281.246747][T12899] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 281.246774][T12899] ? sock_common_getsockopt+0x2d/0xb0 [ 281.246809][T12899] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 281.246832][T12899] do_sock_getsockopt+0x51d/0x7e0 [ 281.246857][T12899] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 281.246891][T12899] ? __fget_files+0x3a2/0x420 [ 281.246912][T12899] ? __fget_files+0x2a/0x420 [ 281.246940][T12899] __x64_sys_getsockopt+0x1a4/0x240 [ 281.246964][T12899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.246983][T12899] do_syscall_64+0x174/0x580 [ 281.247002][T12899] ? trace_irq_disable+0x3b/0x140 [ 281.247027][T12899] ? clear_bhb_loop+0x40/0x90 [ 281.247048][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.247065][T12899] RIP: 0033:0x7f07cdf9ce59 [ 281.247083][T12899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.247097][T12899] RSP: 002b:00007f07cee4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 281.247117][T12899] RAX: ffffffffffffffda RBX: 00007f07ce215fa0 RCX: 00007f07cdf9ce59 [ 281.247131][T12899] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 281.247141][T12899] RBP: 00007f07cee4d090 R08: 00002000000000c0 R09: 0000000000000000 [ 281.247153][T12899] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 281.247163][T12899] R13: 00007f07ce216038 R14: 00007f07ce215fa0 R15: 00007ffd7836dea8 [ 281.247191][T12899] [ 281.557243][T12901] netlink: 'syz.2.2059': attribute type 1 has an invalid length. [ 281.793356][T12901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.024122][T12920] __nla_validate_parse: 13 callbacks suppressed [ 282.024142][T12920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2064'. [ 282.103468][T12920] x_tables: unsorted underflow at hook 4 [ 282.160164][T12920] ip6gre2: entered allmulticast mode [ 282.566514][T12941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2071'. [ 282.601849][T12943] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2072'. [ 283.239129][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2080'. [ 283.316575][T12973] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2083'. [ 283.451723][T12975] netlink: 'syz.2.2084': attribute type 21 has an invalid length. [ 283.488656][T12975] netlink: 'syz.2.2084': attribute type 22 has an invalid length. [ 283.508960][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 283.513623][T12975] netlink: 'syz.2.2084': attribute type 23 has an invalid length. [ 283.532902][T12975] netlink: 'syz.2.2084': attribute type 25 has an invalid length. [ 283.544058][T12975] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2084'. [ 283.565780][T12979] xt_TCPMSS: Only works on TCP SYN packets [ 283.616192][T12983] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 283.762500][T12979] dummy0: entered promiscuous mode [ 283.796737][T12978] dummy0: left promiscuous mode [ 283.808832][T12990] netlink: 'syz.0.2089': attribute type 10 has an invalid length. [ 283.943823][T12993] syzkaller0: entered promiscuous mode [ 283.963934][T12993] syzkaller0: entered allmulticast mode [ 283.966592][T12996] FAULT_INJECTION: forcing a failure. [ 283.966592][T12996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.006606][T12996] CPU: 1 UID: 0 PID: 12996 Comm: syz.4.2092 Not tainted syzkaller #0 PREEMPT(full) [ 284.006629][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.006637][T12996] Call Trace: [ 284.006643][T12996] [ 284.006649][T12996] dump_stack_lvl+0xe8/0x150 [ 284.006671][T12996] should_fail_ex+0x40c/0x560 [ 284.006696][T12996] _copy_to_user+0x31/0xb0 [ 284.006713][T12996] copy_to_sockptr_offset+0x66/0xa0 [ 284.006736][T12996] do_ipv6_getsockopt+0x1f67/0x2590 [ 284.006763][T12996] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 284.006780][T12996] ? aa_label_sk_perm+0x532/0x6e0 [ 284.006807][T12996] ? _parse_integer_limit+0x1ae/0x1f0 [ 284.006839][T12996] ? __lock_acquire+0x683/0x2cd0 [ 284.006855][T12996] ? kstrtouint+0x6e/0xe0 [ 284.006886][T12996] ? __might_fault+0xaf/0x130 [ 284.006908][T12996] ipv6_getsockopt+0xbd/0x2c0 [ 284.006932][T12996] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 284.006953][T12996] ? sock_common_getsockopt+0x2d/0xb0 [ 284.006971][T12996] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 284.006989][T12996] do_sock_getsockopt+0x51d/0x7e0 [ 284.007008][T12996] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 284.007032][T12996] ? __fget_files+0x3a2/0x420 [ 284.007047][T12996] ? __fget_files+0x2a/0x420 [ 284.007076][T12996] __x64_sys_getsockopt+0x1a4/0x240 [ 284.007095][T12996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.007109][T12996] do_syscall_64+0x174/0x580 [ 284.007124][T12996] ? trace_irq_disable+0x3b/0x140 [ 284.007143][T12996] ? clear_bhb_loop+0x40/0x90 [ 284.007164][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.007178][T12996] RIP: 0033:0x7f82ff19ce59 [ 284.007192][T12996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.007206][T12996] RSP: 002b:00007f8300060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 284.007223][T12996] RAX: ffffffffffffffda RBX: 00007f82ff415fa0 RCX: 00007f82ff19ce59 [ 284.007232][T12996] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 284.007240][T12996] RBP: 00007f8300060090 R08: 00002000000000c0 R09: 0000000000000000 [ 284.007248][T12996] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 284.007256][T12996] R13: 00007f82ff416038 R14: 00007f82ff415fa0 R15: 00007ffe5148f498 [ 284.007279][T12996] [ 284.276062][T13000] syzkaller0: entered promiscuous mode [ 284.574427][T13010] bridge_slave_1: entered promiscuous mode [ 284.783080][T13016] bond12: ARP target 9.0.0.0 is already present [ 284.791217][T13016] bond12: option arp_ip_target: invalid value (9) [ 284.799200][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2099'. [ 284.815710][T13016] bond12 (unregistering): Released all slaves [ 287.400971][T13055] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 287.518350][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2110'. [ 287.532725][T13064] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2110'. [ 287.597401][T13067] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 287.675990][T13069] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 287.713576][T13069] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2109'. [ 287.837182][T13086] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 287.870001][T13086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2116'. [ 288.207409][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 288.230271][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2127'. [ 288.240498][T13114] syzkaller0: entered promiscuous mode [ 288.257719][T13114] syzkaller0: entered allmulticast mode [ 288.286808][T13114] tipc: Enabled bearer , priority 0 [ 288.296683][T13113] tipc: Resetting bearer [ 288.353600][T13113] tipc: Disabling bearer [ 288.442305][T13125] nbd4: detected capacity change from 0 to 63 [ 288.522219][T13130] bridge0: left promiscuous mode [ 288.549168][T13130] dummy0: left promiscuous mode [ 288.614938][T13130] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 288.652739][ T50] block nbd4: Receive control failed (result -104) [ 288.733844][T13141] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2135'. [ 288.746046][T13141] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2135'. [ 288.784670][T13141] netlink: 'syz.1.2135': attribute type 62 has an invalid length. [ 288.983591][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 289.116218][T13162] netlink: 'syz.4.2144': attribute type 1 has an invalid length. [ 289.133776][T13162] xt_nat: multiple ranges no longer supported [ 289.143882][T13154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2141'. [ 289.209942][T13154] block nbd3: server does not support multiple connections per device. [ 289.219487][T13154] block nbd3: shutting down sockets [ 289.231880][T13169] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 289.260592][T13169] netlink: 'syz.4.2147': attribute type 2 has an invalid length. [ 289.278850][T13169] gtp0: entered promiscuous mode [ 289.283962][T13169] gtp0: entered allmulticast mode [ 289.405017][T13178] netlink: 'syz.3.2149': attribute type 4 has an invalid length. [ 289.432880][T13173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.435991][T13178] netlink: 'syz.3.2149': attribute type 4 has an invalid length. [ 289.978513][T13202] netlink: 'syz.4.2159': attribute type 1 has an invalid length. [ 289.990678][T13198] netlink: 'syz.2.2157': attribute type 1 has an invalid length. [ 289.992313][T13202] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 290.025891][T13204] xt_hashlimit: size too large, truncated to 1048576 [ 290.080454][T13198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.136336][T13212] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 290.247259][T13212] 8021q: adding VLAN 0 to HW filter on device bond13 [ 290.260017][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 290.267475][ T5626] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 290.349592][T13207] bond13: entered promiscuous mode [ 290.361968][T13207] bond13: entered allmulticast mode [ 290.469567][T13212] macvlan3: entered promiscuous mode [ 290.497299][T13212] macvlan3: entered allmulticast mode [ 290.528375][T13212] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 291.037106][T13258] xt_l2tp: v2 sid > 0xffff: 8388608 [ 291.404711][T13265] [ 291.407085][T13265] ====================================================== [ 291.414123][T13265] WARNING: possible circular locking dependency detected [ 291.421164][T13265] syzkaller #0 Not tainted [ 291.425587][T13265] ------------------------------------------------------ [ 291.432613][T13265] syz.0.2175/13265 is trying to acquire lock: [ 291.438678][T13265] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 291.447997][T13265] [ 291.447997][T13265] but task is already holding lock: [ 291.455344][T13265] ffff8880334cd530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 291.464561][T13265] [ 291.464561][T13265] which lock already depends on the new lock. [ 291.464561][T13265] [ 291.474952][T13265] [ 291.474952][T13265] the existing dependency chain (in reverse order) is: [ 291.483951][T13265] [ 291.483951][T13265] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 291.491501][T13265] __mutex_lock+0x19d/0x1590 [ 291.496608][T13265] ip6_mc_msfilter+0x22a/0xf10 [ 291.501882][T13265] ipv6_set_mcast_msfilter+0x25e/0x310 [ 291.507865][T13265] do_ipv6_setsockopt+0x1368/0x3190 [ 291.513575][T13265] ipv6_setsockopt+0x59/0x170 [ 291.518763][T13265] do_sock_setsockopt+0x17c/0x1b0 [ 291.524295][T13265] __x64_sys_setsockopt+0x13d/0x1b0 [ 291.530000][T13265] do_syscall_64+0x174/0x580 [ 291.535098][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.541501][T13265] [ 291.541501][T13265] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 291.549227][T13265] lock_sock_nested+0x41/0x100 [ 291.554505][T13265] inet_shutdown+0x6a/0x390 [ 291.559527][T13265] nbd_mark_nsock_dead+0x2cb/0x550 [ 291.565154][T13265] recv_work+0x1cef/0x1e10 [ 291.570083][T13265] process_scheduled_works+0xa8e/0x14e0 [ 291.576146][T13265] worker_thread+0xa47/0xfb0 [ 291.581245][T13265] kthread+0x389/0x470 [ 291.585829][T13265] ret_from_fork+0x514/0xb70 [ 291.590926][T13265] ret_from_fork_asm+0x1a/0x30 [ 291.596201][T13265] [ 291.596201][T13265] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 291.603838][T13265] __mutex_lock+0x19d/0x1590 [ 291.609121][T13265] nbd_queue_rq+0x373/0x1150 [ 291.614224][T13265] blk_mq_dispatch_rq_list+0x499/0x1990 [ 291.620279][T13265] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 291.627123][T13265] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 291.633615][T13265] blk_mq_run_hw_queue+0x348/0x4f0 [ 291.639233][T13265] blk_mq_dispatch_list+0xd11/0xe10 [ 291.644941][T13265] blk_mq_flush_plug_list+0x45f/0x540 [ 291.650819][T13265] __blk_flush_plug+0x3ed/0x4d0 [ 291.656178][T13265] __submit_bio+0x465/0x560 [ 291.661196][T13265] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 291.667336][T13265] block_read_full_folio+0x599/0x830 [ 291.673127][T13265] filemap_read_folio+0x12c/0x3a0 [ 291.678664][T13265] do_read_cache_folio+0x354/0x590 [ 291.684292][T13265] read_part_sector+0xb6/0x2b0 [ 291.689566][T13265] adfspart_check_ICS+0xb1/0x960 [ 291.695014][T13265] bdev_disk_changed+0x82b/0x1780 [ 291.700546][T13265] blkdev_get_whole+0x372/0x510 [ 291.705917][T13265] bdev_open+0x324/0xd70 [ 291.710691][T13265] blkdev_open+0x461/0x600 [ 291.715632][T13265] do_dentry_open+0x816/0x1380 [ 291.720910][T13265] vfs_open+0x3b/0x340 [ 291.725504][T13265] path_openat+0x2e3b/0x3890 [ 291.730629][T13265] do_file_open+0x23e/0x4a0 [ 291.735660][T13265] do_sys_openat2+0x113/0x200 [ 291.740857][T13265] __x64_sys_openat+0x138/0x170 [ 291.746220][T13265] do_syscall_64+0x174/0x580 [ 291.751318][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.757718][T13265] [ 291.757718][T13265] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 291.764918][T13265] __mutex_lock+0x19d/0x1590 [ 291.770026][T13265] nbd_queue_rq+0xc1/0x1150 [ 291.775133][T13265] blk_mq_dispatch_rq_list+0x499/0x1990 [ 291.781189][T13265] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 291.788026][T13265] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 291.794520][T13265] blk_mq_run_hw_queue+0x348/0x4f0 [ 291.800138][T13265] blk_mq_dispatch_list+0xd11/0xe10 [ 291.805848][T13265] blk_mq_flush_plug_list+0x45f/0x540 [ 291.811740][T13265] __blk_flush_plug+0x3ed/0x4d0 [ 291.817117][T13265] __submit_bio+0x465/0x560 [ 291.822145][T13265] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 291.828291][T13265] block_read_full_folio+0x599/0x830 [ 291.834085][T13265] filemap_read_folio+0x12c/0x3a0 [ 291.839622][T13265] do_read_cache_folio+0x354/0x590 [ 291.845247][T13265] read_part_sector+0xb6/0x2b0 [ 291.850521][T13265] adfspart_check_ICS+0xb1/0x960 [ 291.856000][T13265] bdev_disk_changed+0x82b/0x1780 [ 291.861534][T13265] blkdev_get_whole+0x372/0x510 [ 291.866896][T13265] bdev_open+0x324/0xd70 [ 291.871646][T13265] blkdev_open+0x461/0x600 [ 291.876573][T13265] do_dentry_open+0x816/0x1380 [ 291.881848][T13265] vfs_open+0x3b/0x340 [ 291.886423][T13265] path_openat+0x2e3b/0x3890 [ 291.891526][T13265] do_file_open+0x23e/0x4a0 [ 291.896539][T13265] do_sys_openat2+0x113/0x200 [ 291.901725][T13265] __x64_sys_openat+0x138/0x170 [ 291.907095][T13265] do_syscall_64+0x174/0x580 [ 291.912195][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.918595][T13265] [ 291.918595][T13265] -> #3 (set->srcu){.+.+}-{0:0}: [ 291.925710][T13265] __synchronize_srcu+0xc9/0x2f0 [ 291.931155][T13265] elevator_switch+0x1e8/0x7b0 [ 291.936425][T13265] elevator_change+0x2fa/0x480 [ 291.941702][T13265] elevator_set_default+0x375/0x440 [ 291.947494][T13265] blk_register_queue+0x3f3/0x4e0 [ 291.953028][T13265] __add_disk+0x6cb/0xe30 [ 291.958006][T13265] add_disk_fwnode+0xfb/0x4b0 [ 291.963194][T13265] nbd_dev_add+0x733/0xb60 [ 291.968122][T13265] nbd_init+0x15f/0x1e0 [ 291.972784][T13265] do_one_initcall+0x250/0x870 [ 291.978055][T13265] do_initcall_level+0x10a/0x1a0 [ 291.983510][T13265] do_initcalls+0x59/0xa0 [ 291.988355][T13265] kernel_init_freeable+0x29d/0x3e0 [ 291.994094][T13265] kernel_init+0x1d/0x1d0 [ 291.998937][T13265] ret_from_fork+0x514/0xb70 [ 292.004032][T13265] ret_from_fork_asm+0x1a/0x30 [ 292.009305][T13265] [ 292.009305][T13265] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 292.017111][T13265] __mutex_lock+0x19d/0x1590 [ 292.022210][T13265] elevator_change+0x1af/0x480 [ 292.027480][T13265] elevator_set_none+0xb5/0x140 [ 292.032838][T13265] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 292.039155][T13265] nbd_start_device+0x189/0xb30 [ 292.044517][T13265] nbd_genl_connect+0x1597/0x1c10 [ 292.050061][T13265] genl_family_rcv_msg_doit+0x233/0x340 [ 292.056139][T13265] genl_rcv_msg+0x614/0x7a0 [ 292.061164][T13265] netlink_rcv_skb+0x226/0x4a0 [ 292.066445][T13265] genl_rcv+0x28/0x40 [ 292.070940][T13265] netlink_unicast+0x7bb/0x940 [ 292.076217][T13265] netlink_sendmsg+0x813/0xb40 [ 292.081487][T13265] ____sys_sendmsg+0x9b9/0xa20 [ 292.086758][T13265] ___sys_sendmsg+0x2a5/0x360 [ 292.091938][T13265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.097386][T13265] do_syscall_64+0x174/0x580 [ 292.102483][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.108884][T13265] [ 292.108884][T13265] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 292.117478][T13265] blk_alloc_queue+0x544/0x690 [ 292.122755][T13265] __blk_mq_alloc_disk+0x194/0x390 [ 292.128395][T13265] nbd_dev_add+0x494/0xb60 [ 292.133323][T13265] nbd_init+0x15f/0x1e0 [ 292.137985][T13265] do_one_initcall+0x250/0x870 [ 292.143256][T13265] do_initcall_level+0x10a/0x1a0 [ 292.148707][T13265] do_initcalls+0x59/0xa0 [ 292.153550][T13265] kernel_init_freeable+0x29d/0x3e0 [ 292.159263][T13265] kernel_init+0x1d/0x1d0 [ 292.164102][T13265] ret_from_fork+0x514/0xb70 [ 292.169195][T13265] ret_from_fork_asm+0x1a/0x30 [ 292.174467][T13265] [ 292.174467][T13265] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 292.181750][T13265] __lock_acquire+0x1520/0x2cd0 [ 292.187110][T13265] lock_acquire+0x106/0x350 [ 292.192118][T13265] fs_reclaim_acquire+0x71/0x100 [ 292.197572][T13265] __kmalloc_cache_noprof+0x40/0x660 [ 292.203372][T13265] __ipv6_dev_mc_inc+0x447/0xa40 [ 292.208818][T13265] __ipv6_sock_mc_join+0x4f7/0x740 [ 292.214434][T13265] inet6_addr_add+0x3a4/0xb50 [ 292.219618][T13265] inet6_rtm_newaddr+0x9f3/0xdf0 [ 292.225076][T13265] rtnetlink_rcv_msg+0x802/0xc00 [ 292.230530][T13265] netlink_rcv_skb+0x226/0x4a0 [ 292.235804][T13265] netlink_unicast+0x7bb/0x940 [ 292.241083][T13265] netlink_sendmsg+0x813/0xb40 [ 292.246354][T13265] ____sys_sendmsg+0x9b9/0xa20 [ 292.251622][T13265] ___sys_sendmsg+0x2a5/0x360 [ 292.256803][T13265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.262246][T13265] do_syscall_64+0x174/0x580 [ 292.267343][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.273751][T13265] [ 292.273751][T13265] other info that might help us debug this: [ 292.273751][T13265] [ 292.283962][T13265] Chain exists of: [ 292.283962][T13265] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 292.283962][T13265] [ 292.296554][T13265] Possible unsafe locking scenario: [ 292.296554][T13265] [ 292.303988][T13265] CPU0 CPU1 [ 292.309338][T13265] ---- ---- [ 292.314768][T13265] lock(&idev->mc_lock); [ 292.319082][T13265] lock(sk_lock-AF_INET6); [ 292.326088][T13265] lock(&idev->mc_lock); [ 292.332926][T13265] lock(fs_reclaim); [ 292.336894][T13265] [ 292.336894][T13265] *** DEADLOCK *** [ 292.336894][T13265] [ 292.345020][T13265] 3 locks held by syz.0.2175/13265: [ 292.350204][T13265] #0: ffffffff8fdc1500 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65e/0xdf0 [ 292.359599][T13265] #1: ffff8880323e6da0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x394/0xb50 [ 292.369445][T13265] #2: ffff8880334cd530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 292.379095][T13265] [ 292.379095][T13265] stack backtrace: [ 292.384974][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.0.2175 Not tainted syzkaller #0 PREEMPT(full) [ 292.384992][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.385001][T13265] Call Trace: [ 292.385008][T13265] [ 292.385015][T13265] dump_stack_lvl+0xe8/0x150 [ 292.385034][T13265] print_circular_bug+0x2e1/0x300 [ 292.385055][T13265] check_noncircular+0x12e/0x150 [ 292.385075][T13265] __lock_acquire+0x1520/0x2cd0 [ 292.385093][T13265] ? rcu_is_watching+0x15/0xb0 [ 292.385110][T13265] ? trace_contention_end+0x3d/0x140 [ 292.385130][T13265] ? __mutex_lock+0x30f/0x1590 [ 292.385149][T13265] ? __kmalloc_cache_noprof+0x40/0x660 [ 292.385169][T13265] lock_acquire+0x106/0x350 [ 292.385183][T13265] ? __kmalloc_cache_noprof+0x40/0x660 [ 292.385204][T13265] ? __pfx___mutex_lock+0x10/0x10 [ 292.385221][T13265] ? in6_dev_get+0x1a/0x290 [ 292.385236][T13265] fs_reclaim_acquire+0x71/0x100 [ 292.385257][T13265] ? __kmalloc_cache_noprof+0x40/0x660 [ 292.385276][T13265] __kmalloc_cache_noprof+0x40/0x660 [ 292.385296][T13265] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 292.385312][T13265] __ipv6_dev_mc_inc+0x447/0xa40 [ 292.385332][T13265] __ipv6_sock_mc_join+0x4f7/0x740 [ 292.385347][T13265] ? __local_bh_enable_ip+0xd0/0x130 [ 292.385364][T13265] inet6_addr_add+0x3a4/0xb50 [ 292.385381][T13265] inet6_rtm_newaddr+0x9f3/0xdf0 [ 292.385405][T13265] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 292.385428][T13265] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 292.385456][T13265] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 292.385476][T13265] rtnetlink_rcv_msg+0x802/0xc00 [ 292.385497][T13265] ? kasan_save_track+0x3e/0x80 [ 292.385516][T13265] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 292.385543][T13265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.385565][T13265] ? __lock_acquire+0x683/0x2cd0 [ 292.385583][T13265] netlink_rcv_skb+0x226/0x4a0 [ 292.385599][T13265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.385621][T13265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.385640][T13265] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.385655][T13265] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.385672][T13265] netlink_unicast+0x7bb/0x940 [ 292.385698][T13265] netlink_sendmsg+0x813/0xb40 [ 292.385717][T13265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.385734][T13265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.385755][T13265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.385774][T13265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.385790][T13265] ____sys_sendmsg+0x9b9/0xa20 [ 292.385806][T13265] ? __might_fault+0xaf/0x130 [ 292.385826][T13265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.385844][T13265] ? import_iovec+0x73/0xa0 [ 292.385861][T13265] ___sys_sendmsg+0x2a5/0x360 [ 292.385875][T13265] ? __lock_acquire+0x683/0x2cd0 [ 292.385891][T13265] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.385908][T13265] ? futex_wake+0x4d7/0x5b0 [ 292.385936][T13265] ? __fget_files+0x2a/0x420 [ 292.385954][T13265] ? __fget_files+0x3a2/0x420 [ 292.385974][T13265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.385990][T13265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.386008][T13265] ? rcu_is_watching+0x15/0xb0 [ 292.386028][T13265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.386043][T13265] do_syscall_64+0x174/0x580 [ 292.386059][T13265] ? trace_irq_disable+0x3b/0x140 [ 292.386079][T13265] ? clear_bhb_loop+0x40/0x90 [ 292.386096][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.386110][T13265] RIP: 0033:0x7fe7d639ce59 [ 292.386125][T13265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.386139][T13265] RSP: 002b:00007fe7d7336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.386156][T13265] RAX: ffffffffffffffda RBX: 00007fe7d6615fa0 RCX: 00007fe7d639ce59 [ 292.386168][T13265] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 292.386178][T13265] RBP: 00007fe7d6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.386187][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.386196][T13265] R13: 00007fe7d6616038 R14: 00007fe7d6615fa0 R15: 00007fff97eb6a98 [ 292.386213][T13265] [ 292.780894][T13272] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 292.857526][T13267] netlink: 'syz.4.2174': attribute type 32 has an invalid length. [ 292.887378][T13272] __nla_validate_parse: 6 callbacks suppressed [ 292.887399][T13272] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2177'.